# ShinyHunters healthcare sector cyberattacks

> Live situation record from CLSTR: https://clstr.news/situations/shinyhunters-healthcare-sector-cyberattacks
> Updated: 2026-09-23T09:39:20.000Z. Sources: 31. Developments: 2.

The hacking group ShinyHunters has targeted major healthcare and medical service providers through cybersecurity breaches.

In late August 2026, pharmaceutical distributor McKesson confirmed a significant incident involving unauthorized access to third-party applications and cloud environments. The group claimed to have exfiltrated approximately 284 million records, including sensitive medical diagnoses, Social Security numbers, and medication histories, while demanding a $55 million ransom.

By late September 2026, the same group targeted Fresenius Medical Care, the world’s largest dialysis provider. Fresenius reported unauthorized access to a limited number of internal systems but stated that patient care, medical devices, and business operations were not impacted. ShinyHunters subsequently listed the company on its leak site, threatening to release data.

## Timeline

### 2026-09-23: Fresenius Medical Care confirms cyberattack on internal systems

Fresenius Medical Care reports a cyberattack on internal systems following threats from the ShinyHunters group. Meanwhile, German firms face labor shortages and rising job cuts amid economic pressures.

14 sources. https://clstr.news/cluster/kfw-study-only-115-of-german-mittelstand-employ-foreign-skilled-workers

### 2026-08-31: McKesson confirms major cyberattack and data theft

Pharmaceutical giant McKesson confirmed a major cyberattack affecting its oncology and medical-surgical units. The group ShinyHunters claims to have stolen 284 million records and is demanding a $55 million rअn

17 sources. https://clstr.news/cluster/mckesson-confirms-data-theft-following-cyberattack

---
Cite as: ShinyHunters healthcare sector cyberattacks. CLSTR, https://clstr.news/situations/shinyhunters-healthcare-sector-cyberattacks