F500 Pharma & Biotech · Pharmaceuticals · No confirmed finding (unverified, not clean)
Bristol-Myers Squibb
Headline
Nothing confirmed
Nothing company-specific confirmed this pass.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
What this pass recorded. Nothing company-specific confirmed this pass. Same structural position as the other large-molecule manufacturers on this tab: minimal direct consumer contract, substantial indirect patient data through trials and support programmes, and exposure through shared distributors rather than through its own systems. BMS runs oncology patient support programmes, which means the diagnosis data involved is unusually sensitive. Fierce Pharma's reporting on the 2024 Cencora breach lists Bristol Myers Squibb among the affected manufacturers, so this row should not be treated as clean.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
Not independently confirmed this pass with a company-specific consumer data lawsuit beyond the shared industry findings below. SHARED FINDING ACROSS MANY PHARMA COMPANIES: (1) A 2024 breach at CENCORA (a major pharmaceutical distributor, documented separately in the Healthcare Providers tab of this tracker) exposed patient information — names, addresses, birthdates, health diagnoses, and prescriptions — for patients receiving medications marketed by this company, among more than a dozen other manufacturers (Bayer, Genentech, AbbVie, Novartis, Regeneron, GSK, and others) whose distribution flowed through Cencora. (2) A SEPARATE, PENDING consolidated class action (Farrier et al. v. Tempus AI, Inc., N.D. Ill., consolidated complaint filed April 15, 2026, asserting Illinois Genetic Information Privacy Act and other claims; status not re-verified as of Oct 2026) alleges Tempus AI transferred patients' GENETIC/genomic testing data to pharmaceutical and biotech partners without written consent (allegations only); reporting on the suit names Bristol Myers Squibb among Tempus's 70+ pharma/biotech partners but does not say which partners received the plaintiffs' data.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy See Bristol-Myers Squibb's own published privacy policy | Not fetched yet | NOT CONFIRMED |
| Terms of service See Bristol-Myers Squibb's own published terms of service | Not fetched yet | NOT CONFIRMED |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.