Healthcare Giant McKesson Discloses Cyberattack

Source: The HIPAA Journal On Aug. 28, healthcare giant McKesson disclosed a cyberattack in a Form 8-K filing with the U.S.

Securities and Exchange Commission (SEC). The ShinyHunters extortion group added McKesson to its data leak site, and the listing claims that 284 million patient data records were exfiltrated.

The records relates to rows of raw data, not unique patients. BleepingComputer, which has been in contact with the group, reports around one terabyte of data was exfiltrated between Aug. 21 and Aug. 25, and a ransom demand of more than $55 million was issued.

The McKesson cybersecurity team and third-party experts are investigating, and customers have been warned that there may be an impact on system availability and business operations, including intermittent service degradation. Irving, Texas-based McKesson has approximately 43,000 employees worldwide and facilities across the U.S. and Canada. Full Story