← Back to Feed
McKesson discloses breach after ShinyHunters claims patient data theft
August 28, 2026 · BleepingComputer · Severity: MEDIUM
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records.
Key Takeaways
- McKesson suffered unauthorized access to third-party apps, with ShinyHunters claiming theft of 284 million patient records.
- The massive data breach exposes sensitive healthcare information, leading to severe privacy risks and potential regulatory penalties.
- McKesson must immediately secure third-party integrations, notify all affected patients, and strengthen access controls.