# McKesson reports service disruption and customer-data theft after cyberattack

_Published Monday, August 31, 2026 at 12:18 PM EDT · Security · Latest · Tier 1 — Major_

![McKesson reports service disruption and customer-data theft after cyberattack — Primary](https://cms.therecord.media/uploads/Mc_Kesson_b9b31a9183.jpg)

McKesson said it is investigating a cybersecurity incident involving an unnamed third-party application that attackers accessed to exfiltrate data.

The company said customers may face intermittent service degradation and later said stolen data was associated with its oncology and surgical business units. McKesson said it has reasonable assurance the attackers are no longer in its systems, will offer affected customers credit monitoring and identity protection, and is not proactively disconnecting systems.

ShinyHunters claimed responsibility, but McKesson had not attributed the attack.

## Sources

- [therecord.media](https://therecord.media/mckesson-cyberattack-ransomware-pharma)

---
Canonical: https://techandbusiness.org/newswire/gYCJP_dHlIlrCz-Py_TbWQ
Published: 2026-08-31T16:18:15.154Z
Story chronology: 2026-08-31T13:14:38.617Z
Retrieved: 2026-10-15T21:06:48.089Z
Publisher: Tech & Business (techandbusiness.org)