ShinyHunters Claims McKesson Breach of 284M Records

The hacking group ShinyHunters claims it breached McKesson, one of the largest US healthcare distributors, and stole 284 million patient records, according to HIStalk. If the claim holds up, it would be among the biggest healthcare data breaches on record.

McKesson sits at the center of the US drug and medical supply chain, moving pharmaceuticals and data on behalf of pharmacies, hospitals, and health systems nationwide. A breach at that scale would expose not just one provider but a wide web of downstream partners and patients whose records pass through the company's systems.

The figure has not been independently verified, and attackers routinely inflate stolen data counts to pressure victims and sell access. Still, ShinyHunters has a track record of large corporate intrusions. Expect scrutiny of McKesson's disclosure timeline, any HIPAA breach notification obligations, and questions about how a distributor of this size handles patient data at rest and in transit.