ShinyHunters claims it stole 284 million patient records from McKesson

Keypoints

• McKesson detected the intrusion on August 25, 2026.
• The breach involved unauthorized access to third-party applications and data exfiltration.
• McKesson said the investigation is still in its early stages.
• ShinyHunters claims it used vishing and stolen Okta credentials to access McKesson systems.
• The attackers say they stole sensitive records and demanded $55,236,150.