Intruders reach McKesson through third-party applications and exfiltrate data of some oncology and medical-surgical customers

US drug distributor McKesson said in an SEC 8-K filing that it discovered a cybersecurity incident affecting its information systems on August 25 and that the investigation is in its early stages ^[1]. The company told customers the incident involved unauthorized access to third-party applications and data exfiltration, and later confirmed the data relates to a subset of customers in its Oncology & Multispecialty and Medical-Surgical units; ShinyHunters told BleepingComputer it was responsible and claimed about 284 million patient-related records, which is unverified ^[2][3]. Affected people can use the free credit monitoring and identity protection McKesson is offering, and customers should expect intermittent service degradation the company warned about ^[2][3].

Industries mainly affected: Healthcare

1. Affected people should use the free credit monitoring and identity protection offered by McKesson .