MEDIUMVulnerability
Global

McKesson is investigating a cybersecurity incident after ShinyHunters claims patient data theft

·Source: DataBreaches.net

Updated:

Executive Summary

Lawrence Abrams reports: Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. McKesson is a major U.S. healthcare company and pharmaceutical distributor that provides medicines, medical suppli

Analysis

Lawrence Abrams reports: Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. McKesson is a major U.S. healthcare company and pharmaceutical distributor that provides medicines, medical supplies, technology, and services to... Source
Source Attribution

Originally published by DataBreaches.net on Aug 29, 2026.

Related Threats

MEDIUMVulnerability

Unit 42 Sees AI Rewriting Enterprise Security Work

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/unit-42-sees-ai-rewriting-enterprise-security-work-image_small-4-a-32691.jpg" align=right hspace=4><b>Unit 42 Says Human Experts Will Increasingly Oversee AI-Driven Defense Work</b><br>The job of security professionals will shift more toward administration and orchestration as security moves to more autonomous agents, Palo Alto Ne

Bank Info Security
MEDIUMVulnerability

McKesson discloses breach after ShinyHunters claims patient data theft

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. [...]

BleepingComputer
HIGHVulnerability

NVD HIGH: CVE-2026-82017 — IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry...

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader. Attackers can inject malicious kernel command line parameters that execute with boot environment privileg

CVE-2026-82017
NIST NVD