EVENT DOSSIER
American pharmaceutical distribution giant McKesson suffered a cybersecurity incident. The hacker group ShinyHunters claimed last week to have infiltrated its cloud accounts through phishing and social engineering tactics, stealing millions of rows of patient data including names, addresses, social security numbers, and diagnostic information. The hackers demanded $55 million in ransom from the company in exchange for non-public documents. McKesson confirmed that the hackers had infiltrated and leaked data, and said that this would likely result in intermittent service interruptions. However, it stated that there was no ongoing unauthorized activity and refused to disclose the number of affected individuals. This incident made McKesson one of the recent victims of a series of cyberattacks targeting the medical industry.
黑客组织 ShinyHunters 声称上周对美国医药分销巨头 McKesson 发动网络攻击，窃取数百万行患者数据。McKesson 确认黑客入侵其云端账户并外泄数据，预计将导致间歇性服务降级。该黑客团伙通过钓鱼和社会工程学手段诱骗员工授权访问，窃取了包含姓名、地址、社保号码及诊断、药物等敏感健康信息的数据。黑客向公司勒索 5500 万美元赎金以换取不公开文件，但 McKesson 表示其系统无持续未授权活动且拒绝透露受影响人数。McKesson 是美国最大的医药分销商之一，此次事件使其成为近期一系列针对医疗行业网络攻击的受害者。