Cencora, Inc.

Item 1.05 Material Cybersecurity Incidents. On February 21, 2024, Cencora, Inc. (the “Company”), learned that data from its information systems had been exfiltrated, some of which may contain personal information. Upon initial detection of the unauthorized activity, the Company immediately took containment steps and commenced an investigation with the assistance of law enforcement, cybersecurity experts and external counsel. As of the date of this filing, the incident has not had a material impact on the Company’s operations, and its information systems continue to be operational. The Company has not yet determined whether the incident is reasonably likely to materially impact the Company’s financial condition or results of operations. Forward-Looking Statements Certain of the statements contained in this Current Report on Form 8-K are “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended (the “Securities Exchange Act”). Words such as “aim,” “anticipate,” “believe,” “can,” “continue,” “could,”, “estimate,” “expect,” “intend,” “may,” “might,” “on track,” “opportunity,” “plan,” “possible,” “potential,” “predict,” “project,” “seek,” “should,” “strive,” “sustain,” “synergy,” “target,” “will,” “would” and similar expressions are intended to identify forward-looking statements, but the absence of these words does not mean that a statement is not forward-looking. These statements are based on management’s current expectations and are subject to uncertainty and changes in circumstances and speak only as of the date hereof. These statements are not guarantees of future performance and are based on assumptions and estimates that could prove incorrect or could cau