McKesson’s August 2026 cyberattack exposed data tied to about 6.4 million people, according to analysis of leaked files added to Have I Been Pwned. The leaked records are linked to ShinyHunters’ extortion attack and reportedly include names, addresses, dates of birth, phone numbers, employer details, and sensitive health information; the group had claimed to steal 284 million documents and demanded $55.2 million, while McKesson had not publicly confirmed the full scope in this report.
Why it matters: This is a large healthcare breach affecting patients, providers, and staff, with sensitive medical details reportedly exposed. Affected people should watch for breach notices, phishing, and identity misuse, while healthcare organizations should assess third-party exposure and any downstream patient or provider impact.
2026.09.10
100% relevant
The article establishes the scale and data types involved in the McKesson breach and ties the leak to the ShinyHunters extortion event, creating a distinct, trackable incident.
← Back to all stories