Mckesson - GoKawiil

ShinyHunters claims theft of millions of patient records from McKesson's cloud systems

Pharmaceutical distributor McKesson confirmed hackers broke into several cloud-hosted accounts and stole data tied to its oncology and medical-surgical units. The ShinyHunters group told TechCrunch it used phishing and social engineering to trick employees into granting access, then pulled millions of rows of patient records from Snowflake and Salesforce environments, including names, Social Security numbers, diagnoses, medications, and employee home addresses.

techcrunch.com · 2026-08-31

McKesson confirms data breach after ShinyHunters claims 284 million patient records stolen

McKesson, a major U.S. healthcare and pharmaceutical distributor, disclosed in an SEC filing that it discovered unauthorized access to third-party applications and data exfiltration on August 25, 2026. The extortion group ShinyHunters claims responsibility, alleging it stole 284 million patient records, though McKesson has not confirmed the scope or named the affected applications. The company says its investigation is ongoing and has not yet determined whether the incident is financially material.

bleepingcomputer.com · 2026-08-28