Another ShinyHunters suspect arrested
Authorities arrested a teenage ShinyHunters suspect in Jordan, the second member detained after a Dutch arrest.
74
Victim
McKesson
- Mentions · 7d0
- Mentions · 30d1
- All mentions17
- First seenAug 31, 2026
- Last mentioned24d ago
Timeline
17 articles · newest firstShinyHunters trades financial extortion for a reckless war of ego with the FBI
ShinyHunters claims it stole personal and assignment data on FBI agents to force retraction of an agency advisory.
84
ShinyHunters Claim Hack of Rival Ransomware Gang Clop
ShinyHunters hacked rival ransomware gang Clop, defacing its leak site and claiming to have stolen operational data and private keys.
70
ShinyHunters expose 6.4M in attack on medical supplier McKesson
Have I Been Pwned data shows ShinyHunters' attack on medical supplier McKesson exposed records of roughly 6.4 million individuals.
76
ShinyHunters expose 6.4M in attack on medical supplier McKesson
ShinyHunters leaked stolen McKesson data exposing roughly 6.4 million individuals after the medical supplier reportedly declined a $55.2 million extortion demand.
78
Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast
Help Net Security week-in-review roundup: Claude infostealer lockouts, record Patch Tuesday, McKesson breach, SonicWall zero-days, PaperCut attacks.
28
The story behind the intelligence
Cisco Talos newsletter features adversary-engagement podcast, flags AI guardrail 'safety penalty' slowing defenders, and recaps McKesson breach and PaperCut patching headlines.
22
Health data of more than 9.5 million people leaked from Aesto record system
Health data firm Aesto reported a breach affecting over 9.5 million people after hackers accessed its AWS infrastructure between December 2 and 18.
74
Nutex Health Says Patient Data Stolen, Hackers Threaten Leak
The Gentlemen ransomware gang claims breach of US healthcare provider Nutex Health, exfiltrating patient and employee data and threatening publication.
65
Healthcare Giant McKesson Investigates Data Breach Incident
ShinyHunters claims theft of 284 million records from healthcare giant McKesson, which says it is investigating the alleged breach.
82
Healthcare cyberattacks hit pacemakers and millions of patient records
McKesson confirms a data breach as ShinyHunters demands $55.2M amid healthcare cyberattacks affecting millions of patient records and pacemaker devices.
80
McKesson copes with fallout from data theft extortion attack
McKesson discloses a data theft extortion attack by ShinyHunters affecting oncology and medical-surgical customers, with a reported $55 million demand.
80
Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson
Hackers claim theft of millions of patient records from US healthcare distributor McKesson, which confirmed a hack and expects service degradation.
78
McKesson confirms cyber incident after ShinyHunters claims patient-data theft
Healthcare giant McKesson confirmed a cyber incident after ShinyHunters claimed theft of hundreds of millions of patient records.
80
Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack
Pharmaceutical giant McKesson disclosed a cyberattack on a third-party application that exfiltrated customer data, claimed by ShinyHunters.
78
Risky Bulletin: Dutch intel services to get extensive new powers
Netherlands proposed a bill granting AIVD and MIVD expanded warrantless tapping, faster hacking powers, and forced data disclosure, citing Russia, China, and Iran threats.
42
ShinyHunters claims it stole 284 million patient records from McKesson
ShinyHunters claims theft of 284 million patient records from McKesson via vishing, Okta takeover, and Salesforce/Snowflake access, demanding $55,236,150.
88
Related CVEs
by mentions- CVE-2026-835488%10.0Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
- CVE-2025-61882100%9.8Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing
- CVE-2026-958619%9.3Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
- CVE-2026-8354910%7.8Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
- CVE-2026-62911<1%8.0Capture-Replay Authentication Bypass in Microsoft Exchange Server
Appears with
- ShinyHuntersthreat actor · 15
- McKessonorganization · 8
- McKessonvendor · 5
- FBIorganization · 4
- Oraclevendor · 3
- ShinyHuntersorganization · 2
- FBIvictim · 2
- Oktaproduct · 2
- Instructurevictim · 2
- Salesforcevendor · 2
- Anthropicvendor · 2
- Snowflakevendor · 2
- The Gentlementhreat actor · 2
- Clopthreat actor · 2
- Canvasproduct · 2
- Park Dental Partnersorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.