Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson

ShinyHunters claims to have breached McKesson by using phishing and social engineering to access cloud-hosted Snowflake and Salesforce environments, exfiltrating millions of rows of patient and employee data including names, addresses, Social Security numbers, diagnoses, medications and patient notes; the group has demanded a ransom (reported as $55 million) and shared samples with reporters, while McKesson confirmed unauthorized access and intermittent service impacts.