<![CDATA[McKesson discloses breach after ShinyHunters claims patient data theft]]>Healthcare and pharmaceutical distribution giant McKesson has confirmed a cybersecurity incident involving unauthorized access to third-party applications and data theft. The disclosure follows claims from the ShinyHunters extortion group, which alleges it stole 284 million patient data records. The company has not yet verified the exact scope of the data allegedly exfiltrated.

The breach reportedly involved access to third-party applications used by McKesson, though specific technical details remain limited. ShinyHunters, a known threat actor group, has a history of high-profile data theft and extortion campaigns. McKesson has stated it is investigating the incident, and it is unclear at this stage whether the stolen data includes sensitive health information, personal identifiers, or a mix of both.

  • Affected systems: third-party applications utilized by McKesson
  • Claimed impact: 284 million patient records
  • Threat actor: ShinyHunters extortion group
  • Status: Investigation ongoing; verification of data volume not yet confirmed

Organizations relying on McKesson's pharmaceutical supply chain should monitor advisories for further updates, as the full scope of the breach could have downstream implications for healthcare providers and distributors. At this time, no specific technical indicators of compromise or remediation steps have been publicly released.

Source: Unknown

Is your organization or supply chain impacted by McKesson's third-party data breach, and how are you assessing the potential exposure of patient data?

]]>https://xploitlk.com/topic/136/mckesson-discloses-breach-after-shinyhunters-claims-patient-data-theftRSS for NodeSat, 05 Sep 2026 12:36:27 GMTSat, 29 Aug 2026 00:30:23 GMT60