Hackers claim theft of millions of patient data records from McKesson
American pharmaceutical and medical supplies distribution company McKesson has confirmed unauthorized access to several of its cloud service accounts and data exfiltration. The company also warned that the incident may cause intermittent service disruptions.
As TechCrunch reports, the ShinyHunters hacker group claimed responsibility for the cyberattack. According to the group, the attackers used phishing and social engineering techniques to convince several employees to grant them access to McKesson's network.
What data may have been stolen
ShinyHunters claims it obtained names, addresses and Social Security numbers, as well as protected health information, including diagnoses, medication and allergy data, and patient notes. The hackers say they stole millions of data rows from Snowflake and Salesforce cloud environments, but did not specify the exact number of people who may have been affected by the breach.
According to the group, the stolen information also includes data on McKesson employees, including home addresses. ShinyHunters provided TechCrunch with screenshots and a data sample; the publication said it verified a small portion of the information against public records.
More current news is available on the UA.News Telegram channel Telegram.
Company data and ransom reports
McKesson Chief Technology Officer Francisco Fraga said in a message to customers that the stolen data concerns the company's oncology and multi-specialty care divisions, as well as its medical-surgical supplies business.
Bleeping Computer, which first reported the attack's connection to ShinyHunters, wrote that the hackers demanded $55 million from McKesson in exchange for not disclosing the stolen files. A McKesson representative did not respond to TechCrunch's request for comment.
McKesson is based in Texas and is one of the largest distributors in the United States of pharmaceutical products, medicines, medical supplies and technologies for hospitals and healthcare facilities.
