McKesson reports service disruption and customer-data theft after cyberattack

McKesson said it is investigating a cybersecurity incident involving an unnamed third-party application that attackers accessed to exfiltrate data. The company said customers may face intermittent service degradation and later said stolen data was associated with its oncology and surgical business units. McKesson said it has reasonable assurance the attackers are no longer in its systems, will offer affected customers credit monitoring and identity protection, and is not proactively disconnecting systems. ShinyHunters claimed responsibility, but McKesson had not attributed the attack.