McKesson has disclosed a breach affecting millions of patient records, with the threat actor ShinyHunters demanding a $55.2 million ransom. The incident highlights vulnerability in healthcare infrastructure, with reports indicating that pacemakers and other critical medical devices may have been targeted in the broader attack campaign.
Read full article at The Register ↗McKesson, a major healthcare sector vendor, is managing the aftermath of a data theft extortion attack in which the threat actors remain unidentified by the company. ShinyHunters, a prolific group with an increasing focus on healthcare targets, has claimed responsibility for the breach.
McKesson has confirmed a cyber incident following claims by the ShinyHunters threat actor that they stole hundreds of millions of patient records from the healthcare company. The breach highlights ongoing risks to sensitive health data held by major pharmaceutical and healthcare distributors.
McKesson has confirmed a data breach involving 284 million records stolen by the ShinyHunters extortion group. The threat actor has issued a deadline, apparently related to extortion demands tied to the stolen data.
ShinyHunters claims to have stolen 284 million patient records from McKesson, a major U.S. healthcare distributor, following unauthorized access to third-party applications. McKesson detected the intrusion on August 25, 2026, and stated the investigation is in its early stages with materiality still being assessed.