McKesson discloses breach after ShinyHunters claims patient data theft
ID: c6d89d7f-c0ff-5aa0-92d6-12641ffe1403
STIX ID: report--c6d89d7f-c0ff-5aa0-92d6-12641ffe1403
Feed Name: Bleeping Computer
Threat Score
McKesson disclosed an ongoing cybersecurity incident after the ShinyHunters extortion group claimed responsibility, alleging vishing-based compromise of employee Okta accounts and subsequent access to Salesforce and Snowflake that resulted in roughly 1TB of exfiltrated data and a raw count of ~284 million data records; McKesson says it discovered the incident on August 25, 2026, is investigating, and has not yet confirmed the full scope or material impact.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.