Hackers claim millions of patient records stolen during data breach at McKesson
A cyberattack on pharmaceutical distributor McKesson has led to a significant data breach, with hackers claiming they stole millions of rows of sensitive patient information. The ShinyHunters hacking group is believed responsible for the attack and reportedly used phishing techniques to gain access to cloud-hosted systems like Snowflake and Salesforce. The stolen data includes names, addresses, Social Security numbers, health diagnoses, medications, allergies, and employee home addresses. McKesson confirmed in a statement that hackers accessed several of its accounts earlier this week, causing service disruptions. This incident adds McKesson to a growing list of healthcare companies targeted by cyberattacks recently, including Boston Scientific, Stryker, Abbott Laboratories, Medtronic, CareCloud, and TriZetto. The ShinyHunters group has also been linked to breaches at OneMedical and DentaQuest. The hackers reportedly demanded $55 million in ransom from McKesson to prevent the stolen data from being publicly released. A company spokesperson did not respond to requests for comment.
Tickers: $ABT $BSX $CCLD $MCK $MDT $SYK
Topics: data breach healthcare cybersecurity phishing attack