Ransomware needs a way in. Stolen credentials are the cheapest one.

McKesson Corporation Ransomware Attack

mckesson.comData extortion

shinyhuntersGroup

United StatesCountry

Aug 28, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

View group profile

Domain

mckesson.com

Industry

Healthcare

Country

United States

Discovered

21 days ago

Attack date

Aug 28, 2026

Confidence

100%

Severity

Critical

Status

Data Leaked

Threat group

shinyhunters

Total victims

110

First seen

Sep 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

119

Threat level

5/10

Aggressiveness6/10

Lethality2.6/10

Criticality6.5/10

Status breakdown

Data Leaked

this victim

52.7%58

Negotiating1.8%2

Claimed45.5%50

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Healthcare

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (110)

Same group · shinyhunters

Group activity

Monthly attacks · shinyhunters

110

total · avg 10/mo