In August 2026, McKesson suffered a data breach affecting 6.4 million accounts, linked to an extortion campaign by the group ShinyHunters. The leaked data included emails and personal information from patients and staff. McKesson confirmed unauthorized access to its applications but stated there was no ongoing unauthorized activity.