Privacy Unpacked

Incident · one vendor, 3 organisations

The The Lash Group breach

17 May 2024 to 24 May 2024

3 organisations on the tracker had data taken through The Lash Group, which reported its own breach on 17 May 2024. Each one is listed with the words of the source that names The Lash Group.

The vendor

  1. The Lash GroupUSUnited States · 17 May 2024 2.9MOregon residents

Organisations affected through The Lash Group

  1. Bristol Myers Squibb/Bristol Myers Squibb Patient Assistance Foundation (The Lash Group, LLC)USUnited States · 17 May 2024 34.6KWashington residents

    Bristol Myers Squibb/Bristol Myers Squibb Patient Assistance Foundation (The Lash Group, LLC) Washington Attorney General

  2. GlaxoSmithKline Group of Companies/GSK Patient Access Programs Foundation (The Lash Group, LLC)USUnited States · 24 May 2024 6.6KWashington residents

    GlaxoSmithKline Group of Companies/GSK Patient Access Programs Foundation (The Lash Group, LLC) Washington Attorney General

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names The Lash Group as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.