[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-mckesson-confirms-breach-as-shinyhunters-claims-284m-records":10,"sections":45},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":34,"tags":35,"sources":40,"feedback":44,"feedback_at":22,"cost_usd":44,"total_tokens":44},5971,"mckesson-confirms-breach-as-shinyhunters-claims-284m-records","McKesson Confirms Breach as ShinyHunters Claims 284M Records","McKesson confirmed a ShinyHunters breach, but the attacker's claim of 284 million stolen patient records remains unverified.","McKesson has confirmed a breach by extortion group ShinyHunters, though the attacker's claim of 284 million stolen patient records has not been verified by the company.\n\nShinyHunters told The Register it broke into McKesson's Snowflake and Salesforce instances after targeting several employees with vishing calls. McKesson confirmed the intrusion and said the exposed data came from its Oncology and Multispecialty and Medical-Surgical business units, including patient names, addresses, phone numbers, Social Security numbers, and health details. The group is demanding $55.2 million and says it holds more than 284 million records, but McKesson has not confirmed the scale of the theft. Separately, Boston Scientific disclosed its own breach last week, saying it has removed the attackers from its network though the investigation continues; the company has not attributed the intrusion to ShinyHunters, and the group has not claimed it.\n\nThe Boston Scientific incident is the more unsettling one. New cardiac rhythm devices implanted after August 25 cannot be activated remotely, meaning patients need an in-person visit with the Clinic Assistant app to get their monitors talking to remote care systems. Two healthcare giants breached in the same week is a reminder that hospital-adjacent vendors, not just hospitals, are now prime targets for extortion crews, and that a breach can reach past data and into device functionality patients actually rely on.\n\nShinyHunters has a habit of inflating stolen-record counts to pressure victims into paying, so treat the 284 million figure as a negotiating tactic until McKesson says otherwise.","[\"data-breach\",\"healthcare\",\"shinyhunters\",\"extortion\"]","2026-09-01T21:20:00.000Z","2026-09-01T21:57:33.991Z","2026-09-01T21:57:45.850Z","published",null,[24,30],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Remove or attribute the closing claim that 'extortion groups have a track record of rounding their numbers up' — it's presented as established fact but isn't supported by the source material, which only says the 284M figure and payment remain unverified pending investigation.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"Fix the headline: 'McKesson Confirms ShinyHunters Breach Hit 284M Patient Records' states the 284M figure as confirmed fact, but the body itself says McKesson has not verified that number — only ShinyHunters claims it — so the headline needs to attribute the figure to the attacker rather than present it as confirmed.","security",[36,37,38,39],"data-breach","healthcare","shinyhunters","extortion",[41],{"name":42,"url":43},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fmultiple-healthcare-giants-hit-by-data-breaches-affecting-patient-records-social-security-numbers-and-even-implanted-cardiac-devices",0,{"sections":46},[47,52,56,61,66,71,76,81,86,91,96,101,106,111],{"name":48,"slug":49,"count":50,"latest_published_at":51},"AI","ai",3385,"2026-09-04T22:17:36.000Z",{"name":53,"slug":34,"count":54,"latest_published_at":55},"Security",565,"2026-09-05T00:03:08.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Policy","policy",300,"2026-09-04T22:18:34.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Hardware","hardware",152,"2026-09-03T09:26:48.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Consumer Tech","consumer-tech",97,"2026-09-04T15:29:18.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Science","science",96,"2026-09-03T22:30:00.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Startups","startups",54,"2026-09-04T23:36:14.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"General","general",37,"2026-09-04T20:22:41.000Z",{"name":107,"slug":108,"count":109,"latest_published_at":110},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":112,"slug":113,"count":114,"latest_published_at":115},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]