MEDIUMVulnerability
Global

McKesson discloses breach after ShinyHunters claims patient data theft

·Source: BleepingComputer

Updated:

Executive Summary

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. [...]

Analysis

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. [...]
Source Attribution

Originally published by BleepingComputer on Aug 28, 2026.

Related Threats

MEDIUMVulnerability

Unit 42 Sees AI Rewriting Enterprise Security Work

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/unit-42-sees-ai-rewriting-enterprise-security-work-image_small-4-a-32691.jpg" align=right hspace=4><b>Unit 42 Says Human Experts Will Increasingly Oversee AI-Driven Defense Work</b><br>The job of security professionals will shift more toward administration and orchestration as security moves to more autonomous agents, Palo Alto Ne

Bank Info Security
HIGHVulnerability

NVD HIGH: CVE-2026-82017 — IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry...

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader. Attackers can inject malicious kernel command line parameters that execute with boot environment privileg

CVE-2026-82017
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-3627 — IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacke...

IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVE-2026-3627
NIST NVD