McKesson data breach (2026-08-21) — 6,404,340 accounts
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique email addresses among other personal and corporate data attributes. The impacted data related to a range of individuals and roles, including marketing campaign recipients, patients, staff and healthcare provider contacts. In McKesson's disclosure notice, the company advised it had identified unauthorised access to "certain third-party applications and the exfiltration of certain data was associated with a subset of customers within our Oncology & Multispecialty and Medical-Surgical business units", but had "reasonable assurance of no ongoing unauthorized activity".
- Published by source
- 2026-09-10
- First seen by Reality Radar
- 2026-10-20
- Last verified
- 2026-10-20
Affected
- Manufacturer
- McKesson
- Products
- McKesson
Whether your exact unit is affected depends on the model, serial number and region in the official notice.
Is this affecting you?
Add what you own or use and Reality Radar will tell you when official changes match it — with evidence and next steps.
Sources
- Have I Been Pwned — breach catalogue Tier B published 2026-09-10
Evidence ledger
Every piece of evidence we store is appended to a public hash chain, so later edits are detectable. Anyone can re-verify it.
No ledger entries yet.