Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [BUSINESS]
2 clusters · 31 sources · 23 days · First seen · Last updated
ShinyHunters healthcare sector cyberattacks
Overview
The hacking group ShinyHunters has targeted major healthcare and medical service providers through cybersecurity breaches.
In late August 2026, pharmaceutical distributor McKesson confirmed a significant incident involving unauthorized access to third-party applications and cloud environments. The group claimed to have exfiltrated approximately 284 million records, including sensitive medical diagnoses, Social Security numbers, and medication histories, while demanding a $55 million ransom.
By late September 2026, the same group targeted Fresenius Medical Care, the world’s largest dialysis provider. Fresenius reported unauthorized access to a limited number of internal systems but stated that patient care, medical devices, and business operations were not impacted. ShinyHunters subsequently listed the company on its leak site, threatening to release data.
Entities
ShinyHunters · Germany · KfW · Salesforce · McKesson Corporation
Timeline
-
3 days ago
[BUSINESS] 14 sourcesFresenius Medical Care confirms cyberattack on internal systemsFresenius Medical Care reports a cyberattack on internal systems following threats from the ShinyHunters group. Meanwhile, German firms face labor shortages and rising job cuts amid economic pressures.
-
26 days ago
[TECHNOLOGY] 17 sourcesMcKesson confirms major cyberattack and data theftPharmaceutical giant McKesson confirmed a major cyberattack affecting its oncology and medical-surgical units. The group ShinyHunters claims to have stolen 284 million records and is demanding a $55 million rअn
Sources
ad-hoc-news.de · allgaeuer-anzeigeblatt.de · b-und-i.de · blog.knowbe4.com · cybernoz.com · cyberscoop.com · dreamnews.jp · drweb.de · economiematin.fr · entrevue.fr · espiganoticias.net · finanzen.net · flagthis.com · fxstreet.cz · gff-magazin.de · hnonline.sk · it-boltwise.de · it-daily.net · journaldunet.com · kulturinfo-lippe.de · leinetal24.de · lejsl.com · maschinenmarkt.vogel.de · medicaldaily.com · mm-logistik.vogel.de · nationalcybersecurity.com · servicesmobiles.fr · skspravy.sk · techcrunch.com · therecord.media · upday.com