McKesson, a major U.S. pharmaceutical distributor, has confirmed a data breach involving its cloud-hosted accounts, resulting in the theft of sensitive patient and employee information. The hacking group ShinyHunters has claimed responsibility, stating they accessed the network through phishing tactics and exfiltrated millions of records, including personal and health data.
The company anticipates service disruptions as it addresses the breach. This incident follows a series of cyberattacks on healthcare organizations, highlighting ongoing vulnerabilities in the sector and the increasing trend of data extortion targeting sensitive medical information.