MCKESSON , a major healthcare and pharmaceutical distribution company, has confirmed a cybersecurity incident involving unauthorized access to third-party applications and data theft discovered on August 25, 2026. The ransomware group ShinyHunters claims to have stolen hundreds of millions of sensitive patient records through voice phishing attacks, gaining access via compromised accounts.
McKesson has not disclosed the specific details of the stolen data but urges affected individuals to monitor for potential scams and follow security advice including changing passwords, enabling two-factor authentication, and setting up identity monitoring.