McKesson has confirmed a cyber incident following claims by the ShinyHunters threat actor that they stole hundreds of millions of patient records from the healthcare company. The breach highlights ongoing risks to sensitive health data held by major pharmaceutical and healthcare distributors.
Read full article at Malwarebytes Labs ↗McKesson has confirmed a data breach involving 284 million records stolen by the ShinyHunters extortion group. The threat actor has issued a deadline, apparently related to extortion demands tied to the stolen data.
ShinyHunters claims to have stolen 284 million patient records from McKesson, a major U.S. healthcare distributor, following unauthorized access to third-party applications. McKesson detected the intrusion on August 25, 2026, and stated the investigation is in its early stages with materiality still being assessed.
One AI and two trained eyes delved into the heavily padded leaks
ReliaQuest has responded to compromise claims following a social engineering attack attributed to ShinyHunters, asserting that the threat actor did not successfully breach its systems. The company has provided details about the attack method while refuting reports suggesting a full compromise occurred.