Healthcare Giants McKesson, Boston Scientific Hit by Major Cyberattacks; ShinyHunters Claims 284M Records Stolen

McKesson confirmed the breach a few days after ShinyHunters claimed responsibility. The group told The Register it broke into the company’s Snowflake and Salesforce instances and stole millions of patients’ data. In a statement, McKesson said the stolen data belonged to its Oncology & Multispecialty and Medical-Surgical business units. A spokesperson told The Register that multiple employees were targeted with a vishing attack.

ShinyHunters told The Register that more than 284 million records of patient data were stolen and demanded $55.2 million from the victims. The alleged trove includes patient names, postal and email addresses, phone numbers, Social Security numbers, and details regarding their health condition. Whether those claims are true, and to what extent, remains to be seen after the investigation.

Boston Scientific, meanwhile, said it successfully removed the attackers from its infrastructure, but its investigation into the attack remains ongoing. The company added that new Cardiac Rhythm Management (CRM) devices implanted after August 25 cannot be activated, and the data they generate will not automatically be transmitted to remote patient management systems. Newly implanted insertable cardiac monitors (ICMs) must be activated using the Boston Scientific Clinic Assistant app; they are unable to pair with the patient remote monitoring mobile phone, so available episode data recorded by the ICM will not be transmitted to the remote monitoring system until the ICM can be paired to the patient mobile app. Episodes will continue to be recorded and can be transmitted via an in-person interrogation with the Clinic Assistant app.

Boston Scientific has not named ShinyHunters as the perpetrator, and the group has not publicly claimed responsibility for that attack. The details were reported by TechRadar, citing The Register.