PrivacySignal
Healthcare

ShinyHunters Claims Theft of 284M Records from Healthcare Giant McKesson

HIPAA Journal · · US Federal · Healthcare Privacy

McKesson, one of the largest healthcare distribution companies in the United States, disclosed a cyberattack in a regulatory filing with the SEC. Hacking group ShinyHunters is claiming responsibility and alleges it stole 284 million records from the company.

Why this matters: 284 million records from a healthcare giant is not an abstract number. Healthcare data is among the most sensitive information that exists about a person — diagnoses, prescriptions, treatment history, insurance details. McKesson sits at the center of drug supply chains and touches enormous amounts of patient-linked data. If ShinyHunters' claim holds up, this could be one of the largest healthcare breaches on record. People affected likely have no idea yet, and they had no real choice about whether McKesson held their information in the first place.

Who should care: Healthcare professionals · Privacy officers · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare
HIPAA Journal · · US Federal

Patient Data Likely Accessed in Quest Diagnostics Hack

Quest Diagnostics, a Secaucus, New Jersey-based Fortune 500 diagnostic testing company, has notified the U.S. Securities and Exchange Commission (SEC) […] The post Patient Data Likely Accessed in Quest Diagnostics Hack appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Massachusetts AG Settles HIPAA & MassHealth Fraud Allegations with Transformative Healthcare

The Massachusetts Attorney General has reached a settlement with Transformative Healthcare over alleged violations of HIPAA and MassHealth fraud rules. The case involves a healthcare provider facing both federal privacy law and state Medicaid program allegations.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#state-privacy Read original →
Healthcare
HIPAA Journal · · US Federal

HHS Sends Letters of Nonconformity to Suspected Information Blockers

The U.S. Department of Health and Human Services (HHS) Office of the National Coordinator for Health IT (ONC) has sent […] The post HHS Sends Letters of Nonconformity to Suspected Information Blockers appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
B Bloomberg Government News · · International

Trump’s Medicare AI Push Raises Patient Data Privacy Concerns

The Trump administration is pushing to integrate AI into Medicare, a move that is drawing scrutiny over how patient health data will be used and protected. The initiative affects one of the largest government health programs in the country, covering tens of millions of older and disabled Americans.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai#privacy Read original →
Healthcare
The Guardian — Tech · · International

Palantir patient data tech rejected by many NHS trusts in England

Freedom of information responses show that many NHS trusts across England are declining to use Palantir's £330 million federated data platform, with health officials saying existing or alternative systems perform just as well or better. Some trusts have reported genuine benefits, including improved waiting list and surgery scheduling management, but adoption is far from uniform.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →