A pharmaceutical distributor is confirming unauthorized access to its cloud systems that resulted in data exfiltration.
McKesson says it discovered the incident on August 25th, involving unauthorized access to third-party applications.
The company says the affected data relates to a subset of customers in its oncology and multispecialty division as well as its medical-surgical unit.
The extortion group ShinyHunters claims it obtained access through vishing calls that tricked employees into revealing Okta single sign-on credentials, then pivoted to Salesforce and Snowflake platforms.
The group alleges roughly 284 million patient-record lines and about one terabyte of data were taken between August 21st and 25th, and has set a September 1st deadline for a $55 million payment to avoid publication.
McKesson says it has reasonable assurance of no ongoing unauthorized activity and continues to operate all lines of business.
McKesson has not confirmed the record count, full data types, or ransom details.
The company filed an SEC Form 8-K and plans to offer credit monitoring and identity protection services to impacted individuals.
Follow us on X, Facebook and Telegram
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
 
Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
#TexasBased #McKesson #Confirms #Cloud #Breach #Allegedly #Exposing #Patient #Records