McKesson Reports Data Theft and Service Issues Following Cyberattack
Summary
McKesson says attackers accessed an unnamed third-party application and exfiltrated data tied to oncology and surgical customers, causing possible service degradation. The company says it has reasonable assurance the attackers are no longer inside its systems.
Key points
- McKesson said attackers gained access through an unnamed third-party application and exfiltrated data.
- The affected data was associated with customers in McKesson’s oncology and surgical business units.
- Customers may experience intermittent service degradation, though McKesson said its systems and services remain available.
- McKesson said it has reasonable assurance the attackers are no longer inside its systems and will offer credit monitoring and identity protection to affected customers.
- The company said its investigation is ongoing and did not disclose further incident details.
- ShinyHunters claimed responsibility and threatened potential data leaks; the article does not establish the group’s claim independently.
Article Details
- Victim Organization
- McKesson
- Incident Type
- Cyberattack involving unauthorized access to an unnamed third-party application and data exfiltration; customers experienced intermittent service degradation.
- Data Types Exposed
- Customer data associated with McKesson’s oncology and surgical business units; specific data types were not disclosed.
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Customers may experience intermittent service degradation. McKesson said customers could continue using its systems and services and that it had reasonable assurance the hackers were no longer inside its systems.
- Ransom Or Extortion
- ShinyHunters claimed responsibility and threatened potential leaks. No ransom demand or payment was reported.
- Claim Status
- confirmed