Healthcare Distributor McKesson Investigates Data Breach Claimed by ShinyHunters
McKesson, one of America’s largest healthcare distributors, is investigating a significant data breach. The company confirmed on August 28 that it was looking into an incident involving unauthorized access and data exfiltration from third-party applications. A subsequent update clarified that the breach affected a subset of customers within its Oncology & Multispecialty and Medical-Surgical business units. The notorious threat actor group ShinyHunters has claimed responsibility for the attack, posting an entry for McKesson on their leak site. Reports suggest that as many as 284 million records may have been compromised, with a ransom demand of $55 million. It is believed that the attackers used social engineering tactics to gain initial access to McKesson's systems. Despite the incident, McKesson stated that customer service remains unaffected, its distribution centers are operational, and product shipments are continuing as normal. The company emphasized that there is no ongoing unauthorized activity with...