< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [BUSINESS]

2 clusters · 31 sources · 23 days · First seen · Last updated

ShinyHunters healthcare sector cyberattacks

Overview

The hacking group ShinyHunters has targeted major healthcare and medical service providers through cybersecurity breaches.

In late August 2026, pharmaceutical distributor McKesson confirmed a significant incident involving unauthorized access to third-party applications and cloud environments. The group claimed to have exfiltrated approximately 284 million records, including sensitive medical diagnoses, Social Security numbers, and medication histories, while demanding a $55 million ransom.

By late September 2026, the same group targeted Fresenius Medical Care, the world’s largest dialysis provider. Fresenius reported unauthorized access to a limited number of internal systems but stated that patient care, medical devices, and business operations were not impacted. ShinyHunters subsequently listed the company on its leak site, threatening to release data.

Entities

ShinyHunters · Germany · KfW · Salesforce · McKesson Corporation

Timeline

  1. 3 days ago

    [BUSINESS] 14 sources
    Fresenius Medical Care confirms cyberattack on internal systems

    Fresenius Medical Care reports a cyberattack on internal systems following threats from the ShinyHunters group. Meanwhile, German firms face labor shortages and rising job cuts amid economic pressures.

  2. 26 days ago

    [TECHNOLOGY] 17 sources
    McKesson confirms major cyberattack and data theft

    Pharmaceutical giant McKesson confirmed a major cyberattack affecting its oncology and medical-surgical units. The group ShinyHunters claims to have stolen 284 million records and is demanding a $55 million rअn

Sources

ad-hoc-news.de · allgaeuer-anzeigeblatt.de · b-und-i.de · blog.knowbe4.com · cybernoz.com · cyberscoop.com · dreamnews.jp · drweb.de · economiematin.fr · entrevue.fr · espiganoticias.net · finanzen.net · flagthis.com · fxstreet.cz · gff-magazin.de · hnonline.sk · it-boltwise.de · it-daily.net · journaldunet.com · kulturinfo-lippe.de · leinetal24.de · lejsl.com · maschinenmarkt.vogel.de · medicaldaily.com · mm-logistik.vogel.de · nationalcybersecurity.com · servicesmobiles.fr · skspravy.sk · techcrunch.com · therecord.media · upday.com