McKesson
mckesson.com
VérifiéeDonnées sensibles
Résumé
Cette fuite a exposé : dates de naissance, adresses e-mail, employeurs, genders, noms et prénoms, personal health data, numéros de téléphone et adresses postales.
- Date de la fuite :
- Ajoutée à la base le :
- Comptes concernés :
- 6 404 340 comptes
Données exposées
- Dates de naissance
- Adresses e-mail
- Employeurs
- Genders
- Noms et prénoms
- Personal health data
- Numéros de téléphone
- Adresses postales
Description de la source
Texte original rédigé en anglais par Have I Been Pwned, reproduit sans traduction.
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique email addresses among other personal and corporate data attributes. The impacted data related to a range of individuals and roles, including marketing campaign recipients, patients, staff and healthcare provider contacts. In McKesson's disclosure notice, the company advised it had identified unauthorised access to "certain third-party applications and the exfiltration of certain data was associated with a subset of customers within our Oncology & Multispecialty and Medical-Surgical business units", but had "reasonable assurance of no ongoing unauthorized activity".