MCKESSON Corporation confirmed a data breach where hackers, identified as the ShinyHunters group, exfiltrated customer data from its systems. The breach affects a subset of its Oncology & Multispecialty and Medical-Surgical business units. Although McKesson's services remained unaffected and unauthorized access was disrupted, the company did not disclose specific details regarding the type or number of compromised data.
The ShinyHunters group claims to have obtained 284 million customer records and demands approximately $55 million to avoid releasing this information publicly. McKesson is offering complimentary credit monitoring and identity protection services to affected customers.