Multiple healthcare giants hit by data breaches affecting patient records, social security numbers, and even implanted cardiac devices
Boston Scientific and McKesson are working on restoring services after being struck by disruptive cyberattacks.
Two major healthcare companies, Boston Scientific and McKesson, have been hit by data breaches, exposing sensitive patient records, including names, contact details, Social Security numbers, and health information. The attacks are believed to be orchestrated by the notorious ShinyHunters group. McKesson disclosed that ShinyHunters breached its Snowflake and Salesforce systems, stealing approximately 284 million patient records and demanding a ransom of $55.2 million.
The stolen data mainly pertained to Oncology & Multispecialty and Medical-Surgical business units. Boston Scientific, on the other hand, successfully removed the attackers from its infrastructure, but a glitch has arisen as newly implanted Cardiac Rhythm Management devices cannot be activated and will not automatically transmit recorded episodes to remote monitoring systems until properly paired.
The investigation into the Boston Scientific breach is still ongoing, and the group ShinyHunters has not yet claimed responsibility for the attack.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
