Ransomware needs a way in. Stolen credentials are the cheapest one.

McKesson Corporation Ransomware Attack

mckesson.comData extortion

shinyhuntersGroup

United StatesCountry

Aug 28, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

View group profile

Domain

mckesson.com

Industry

Healthcare

Country

United States

Discovered

about 1 month ago

Attack date

Aug 28, 2026

Confidence

100%

Severity

Critical

Status

Data Leaked

Threat group

shinyhunters

Total victims

112

First seen

Jan 2026

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

120

Threat level

5.5/10

Aggressiveness7/10

Lethality2.6/10

Criticality7.1/10

Status breakdown

Data Leaked

this victim

52.7%59

Negotiating2.7%3

Claimed44.6%50

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Healthcare

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (112)

Same group · shinyhunters

Group activity

Monthly attacks · shinyhunters

112

total · avg 11.2/mo