Massive data breach at McKesson: Millions of patient records stolen
Hackers infiltrated US healthcare giant McKesson's cloud systems, stealing sensitive patient data.
1Scale of the attack
McKesson, one of America's largest pharmaceutical distributors, was targeted by the hacking group ShinyHunters. The attackers breached the company's cloud systems and stole millions of patient records. The compromised data includes addresses, social security numbers, diagnoses, and prescriptions. The company confirmed data leaks from its Snowflake and Salesforce environments.
2Attack methodology
ShinyHunters used phishing and social engineering tactics targeting McKesson employees. By obtaining employee credentials, hackers gained access to the company's network. This method is known to be frequently used by the group in previous attacks. The attackers also stole personal information of company employees.
3Company response
McKesson claimed in its post-attack statement that there was no ongoing unauthorized access to systems. However, the company avoided answering critical questions about the number of affected individuals or hacker demands. CTO Francisco Fraga stated the stolen data belonged to oncology and medical-surgical units. The company warned about potential service disruptions.
4Ransom demand
The hackers demanded $55 million from McKesson in exchange for not publicly releasing the stolen data. According to Bleeping Computer, ShinyHunters had made similar ransom demands before. TechCrunch verified sample data shared by hackers against public records. McKesson hasn't disclosed whether it paid the ransom.
5Other sector attacks
McKesson is just one of many healthcare companies targeted recently. Last week, Boston Scientific suffered a cyberattack that took much of its network offline. Stryker, Abbott Laboratories and Medtronic also experienced similar attacks. Data breaches at CareCloud and TriZetto each affected over 3 million patients.
6ShinyHunters' history
ShinyHunters has emerged as one of the most active data extortion groups in the past two years. The group previously claimed responsibility for attacks on Amazon-owned One Medical and DentaQuest. Experts note health data is particularly valuable to hackers as it remains usable longer than credit card information.
7Value of patient data
Healthcare data holds special value for cybercriminals. These records typically contain sensitive information like social security numbers, insurance details and medical history. Experts say a patient's medical record can sell for 10 times more than credit card data on the black market. The average cost of data breaches is estimated to exceed $10 million.
8Wake-up call for the industry
This attack again exposes cybersecurity vulnerabilities in the healthcare sector. The vulnerability of large companies like McKesson to sophisticated attacks raises concerns. Regulators are expected to introduce stricter regulations for protecting health data. Experts emphasize the need for greater investment in employee training and cloud security.