Violazioni · 42 giorni fa
McKesson ha confermato il 25 agosto un’esfiltrazione di dati da applicazioni di terze parti che coinvolge subset di clienti nei rami Oncology & Multispecialty e Medical-Surgical. ShinyHunters, intanto, ha rivendicato 284 milioni di record e li ha messi in inserzione, spostando il caso dalla sola disclosure del furto alla fase di estorsione e pubblicazione.
L’accesso, secondo quanto riportato, non ha richiesto di rompere direttamente le app: gli attaccanti avrebbero usato credenziali reali ottenute con vishing per entrare nei flussi SSO e negli ambienti cloud normalmente fidati. Proprio perché il traffico sembrava legittimo, la sottrazione è potuta continuare senza spegnere i servizi core.
Per chi dipende da SSO e integrazioni SaaS di terze parti, il punto non è più la continuità operativa ma la perdita di controllo sui dati già usciti. Se i record di pazienti, personale e clienti sono già nelle mani di un gruppo di estorsione, il contenimento dell’incidente non coincide con il ripristino dei servizi.
9 fonti che coprono questa storia
Healthcare Giant McKesson Investigates Data Breach Incident
ShinyHunters claims to have stolen 284 million records from McKesson
Healthcare cyberattacks hit pacemakers and millions of patient records
McKesson admits breach as ShinyHunters demands $55.2M
Hackers Frequently Target Healthcare and Finance Orgs | Huntress
Healthcare organizations and banks handle highly personal information. But a new Huntress survey shows many threat actors frequently target these companies.
McKesson copes with fallout from data theft extortion attack
The major healthcare sector vendor did not identify the attackers, but ShinyHunters, a prolific group increasingly targeting the sector, claimed responsibility.
The company, which distributes medicines and medical devices to hospitals and healthcare practices across the U.S., said it was hacked and expects intermittent service degradation.
McKesson Confirms Data Breach as Attacker Deadline Looms
The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems.
The Record from Recorded Future
Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack
The pharmaceutical and healthcare technology company McKesson informed regulators it is in the early stages of investigating a cybersecurity incident involving an unnamed third-party application.
ShinyHunters claims it stole 284 million patient records from McKesson - Help Net Security
Healthcare company McKesson confirms a data breach as ShinyHunters claims it stole 284 million patient records.
McKesson discloses breach after ShinyHunters claims patient data theft
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records.
Part of the PlainSec briefing for 2026-09-02