[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd6G1lreTf75CXnoF-5Ng4-fvIMg_gOgXYni8KqdAdek":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"b1eee46c-89d0-4c36-b95e-aa43f5fbf549","McKesson Confirms Data Breach as Attacker Deadline Looms","mckesson-confirms-data-breach-as-attacker-deadline-looms-731f87","The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems. The post McKesson Confirms Data Breach as Attacker Deadline Looms appeared first on SecurityWeek.","Healthcare giant McKesson has confirmed a cybersecurity incident where hackers exfiltrated customer data from its systems. The ShinyHunters extortion group claims to have stolen 284 million records, including PII, PHI, and medical information, and is demanding a $55 million ransom. McKesson stated the unauthorized access has been disrupted and services are unaffected, while offering credit monitoring to impacted individuals.","McKesson confirms data breach after ShinyHunters claims theft of 284 million records.","https:\u002F\u002Fwww.securityweek.com\u002Fmckesson-confirms-data-breach-as-attacker-deadline-looms\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F03\u002Fhealthcare-medical.jpeg","2026-08-31T13:14:46+00:00","2026-08-31T14:00:12.472257+00:00",8,[17,20],{"name":18,"type":19},"McKesson","vendor",{"name":21,"type":22},"ShinyHunters","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36,41],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":49,"vendors":137},[50,79,108],{"slug":51,"name":52,"problem":53,"products":54},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"slug":80,"name":81,"problem":82,"products":83},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"slug":109,"name":110,"problem":111,"products":112},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":156},"mckesson-breach-exposes-284m-records-in-shinyhunters-extortion-attack","McKesson Breach Exposes 284M Records in ShinyHunters Extortion Attack","McKesson, a major healthcare company, suffered a significant data breach in which attackers exfiltrated up to 284 million records containing personally identifiable information (PII), protected health information (PHI), and medical data. The ShinyHunters group's ability to access such a vast volume of sensitive records suggests inadequate access controls, insufficient data segmentation, or weak monitoring around critical data repositories. Healthcare organizations are high-value targets precisely because they hold large concentrations of sensitive data with regulatory value and personal harm potential. This incident underscores that even large enterprises with mature security programs can suffer catastrophic data loss if internal controls around sensitive data are not rigorously enforced. The ransom demand of $55 million reflects both the sensitivity of healthcare data and the growing boldness of extortion-focused threat actors.",[143,144,145,146,147,148,149,150,151,152,153,154,155],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SI-4 – System Monitoring","NIST SP 800-53 IR-4 – Incident Handling","HIPAA Security Rule §164.312(a)(1) – Access Control","HIPAA Security Rule §164.312(b) – Audit Controls","HIPAA Breach Notification Rule §164.400–414","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach","NIST CSF DE.CM-1 – Network Monitoring","NIST CSF PR.DS-1 – Data-at-Rest Protection",{}]