McKesson says it is investigating a cybersecurity incident after an alleged data theft connected to the hacking group ShinyHunters. The claim, reported by multiple outlets, says the attackers stole data tied to 284 million records. McKesson has not confirmed the scope of any stolen data, and it continues to assess what happened and what information—if any—was accessed.
According to McKesson’s disclosure, the intrusion involves access through third-party applications. The incident is reported as being detected on August 25, 2026, and the company states its investigation is in its early stages. McKesson also says it has not yet determined whether the incident is material or likely to affect its operations or customers.
The outlets largely focus on the same public allegation and the company’s initial description of the event. However, coverage differs in emphasis: some reports spotlight the scale of the ShinyHunters claim, while others stress McKesson’s limited findings at this stage and its uncertainty about material impact.
