ShinyHunters Breach McKesson Cloud Systems

McKesson confirmed the breach on Friday, noting that unauthorized actors compromised several cloud-hosted accounts within its oncology and medical-surgical units. Chief Technology Officer Francisco Fraga acknowledged the intrusion, warning customers of ongoing service degradation as the company assesses the scope of the exposure. While the full impact remains under investigation, the attackers assert they extracted vast quantities of data from the firm’s Snowflake and Salesforce environments.

Reports indicate that the hackers are demanding a $55 million ransom to prevent the public release of the stolen files. The group, known for its focus on data extortion, provided sample data that experts have verified against public records. This incident follows a pattern of escalating cyberattacks against major medical suppliers, including recent breaches at Boston Scientific and Stryker. McKesson has yet to comment on the specific ransom demand or the total number of individuals impacted by the compromise of both patient and employee records.