Conflict & Security
ShinyHunters claims millions of patient records stolen in McKesson breach amid string of healthcare cyberattacks
September 6, 2026 at 07:25 AM
Coverage
2 reports · over 120 hours
Hacking group ShinyHunters has claimed responsibility for a data breach at pharmaceutical distributor McKesson, the latest cyberattack on a U.S. healthcare company.
- McKesson confirmed Friday that hackers broke into several cloud-hosted accounts and exfiltrated data, and said it continues to operate in all lines of business.
- ShinyHunters told TechCrunch it used phishing and social engineering to gain access, stealing patient data including diagnoses, medications, and Social Security numbers.
- The group said it took millions of rows of data from McKesson's Snowflake and Salesforce environments and demanded a $55 million ransom, per Bleeping Computer.
- Boston Scientific told the SEC its own cyberattack is causing a "global disruption" to operations, affecting its ability to ship and process orders.

