GoKawiilShinyHunters claims theft of millions of patient records from McKesson's cloud systems
Pharmaceutical distributor McKesson confirmed hackers broke into several cloud-hosted accounts and stole data tied to its oncology and medical-surgical units. The ShinyHunters group told TechCrunch it used phishing and social engineering to trick employees into granting access, then pulled millions of rows of patient records from Snowflake and Salesforce environments, including names, Social Security numbers, diagnoses, medications, and employee home addresses.
GoKawiil's interpretation of the reporting above, not reported fact.
McKesson is one of the largest U.S. distributors of medicines and medical supplies, meaning a breach of its systems could expose sensitive health data tied to countless hospitals and patients nationwide. The incident adds to a growing pattern of extortion groups exploiting cloud platforms like Snowflake and Salesforce through social engineering rather than technical exploits, raising fresh concerns about identity verification practices at major healthcare vendors.
- ShinyHunters claims responsibility for breaching McKesson's cloud environment via phishing and social engineering.
- Stolen data reportedly includes patient diagnoses, medications, Social Security numbers, and McKesson employee addresses.
- The breach adds to a wave of recent healthcare data incidents tied to cloud platforms like Snowflake and Salesforce.
Yubico YubiKey 5C NFC Security Key — This breach reportedly started with phishing that tricked employees into handing over access — exactly the attack a hardware security key is built to stop. The YubiKey 5C NFC plugs into USB-C or taps on your phone to confirm logins, so a stolen password alone isn't enough. It works with major accounts like Google, Microsoft, and password managers.
See Yubico YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techcrunch.com — Zack Whittaker, 2026-08-31
Published there as: “Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.