McKesson Data Exfiltration: Why Voice Phishing Target Healthcare Cloud Systems—and How to Protect Yours
A cybersecurity warning for hospitals, health systems, medical groups, pharmacies, healthcare SaaS providers, laboratories, and business associates A healthcare cyberattack does not always start with ransomware, malware, or a software vulnerability. Sometimes, it starts with a phone call . On August 25, 2026, McKesson discovered a cybersecurity incident affecting its information systems. In its SEC filing, the company said its investigation was in its early stages. McKesson subsequently confirmed unauthorized access to certain third-party applications and exfiltration of data associated with a subset of customers within its Oncology & Multispecialty and Medical-Surgical business units. The incident has attracted additional attention because the ShinyHunters extortion group claimed responsibility and told reporters that its access began with voice phishing (vishing) against McKesson employees. The group claimed that compromised Okta SSO accounts were then used to access Sale...