# McKesson reports service disruption and customer-data theft after cyberattack

_Monday, August 31, 2026 at 9:14 AM EDT · Security · Latest · Tier 1 — Major_

![McKesson reports service disruption and customer-data theft after cyberattack — Primary](https://cms.therecord.media/uploads/Mc_Kesson_b9b31a9183.jpg)

McKesson said it is investigating a cybersecurity incident involving an unnamed third-party application that attackers accessed to exfiltrate data.

The company said customers may face intermittent service degradation and later said stolen data was associated with its oncology and surgical business units. McKesson said it has reasonable assurance the attackers are no longer in its systems, will offer affected customers credit monitoring and identity protection, and is not proactively disconnecting systems.

ShinyHunters claimed responsibility, but McKesson had not attributed the attack.

## Sources

- [therecord.media](https://therecord.media/mckesson-cyberattack-ransomware-pharma)

---
Canonical: https://techandbusiness.org/newswire/gYCJP_dHlIlrCz-Py_TbWQ
Retrieved: 2026-08-31T18:48:03.795Z
Publisher: Tech & Business (techandbusiness.org)