ShinyHunters expose 6.4M in attack on medical supplier McKesson

Executive Summary

ShinyHunters, a serial extortionist group, revealed that a cyberattack on medical supplier McKesson compromised about 6.4 million individuals. The breach was first disclosed by the breach‑notification service Have I Been Pwned, which added data leaked by ShinyHunters, confirming the scale of the attack.


Intelligence Metadata - Source Publisher: DataBreaches.net - Published Date: 2026-09-10T13:31:30+00:00 - Category: data-breaches

Original Description: Connor Jones reports: McKesson’s cyberattack last month affected roughly 6.4 million individuals, according to Have I Been Pwned (HIBP). The breach notification service added data leaked by serial extortionists ShinyHunters, revealing the scale of the attack for the first time. ShinyHunters initially claimed to have stolen 284 million documents from the medical and pharmaceutical supply... Source

"It is the mark of an educated mind to be able to entertain a thought without accepting it."

— Aristotle
Source: DataBreaches.net