Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson

Hackers from the ShinyHunters group breached McKesson’s cloud-hosted Snowflake and Salesforce accounts, exfiltrating millions of rows containing names, addresses, Social Security numbers, diagnoses, medications, allergies, patient notes, and employee home addresses. The group claimed the theft via phishing-based social engineering and demanded a $55 million ransom, while McKesson confirmed intermittent service degradation but said no unauthorized activity remains.