McKesson confirms cyber incident after ShinyHunters claims patient-data theft

McKesson disclosed an ongoing cybersecurity incident after detecting unauthorized access to certain third‑party applications affecting customers in its Oncology & Multispecialty and Medical‑Surgical units; the extortion group ShinyHunters claims it used vishing to obtain Okta SSO credentials, accessed Salesforce and Snowflake, and exfiltrated roughly 1 TB of data (claimed ~284 million records), though McKesson has not yet confirmed the scope or specific data types.