McKesson said a cybersecurity incident involving unauthorized access to third-party applications and data exfiltration affected a subset of customers within two of its business units.
The Irving, Texas-based company said in an Aug. 29 cybersecurity update that the incident was associated with customers within its Oncology & Multispecialty and Medical-Surgical business units. McKesson has not disclosed what information was exfiltrated or how many customers or individuals were affected.
The investigation remains ongoing as the company works to determine the full scope of information that may have been accessed or acquired, according to the update.
McKesson said it has “reasonable assurance” that there is no ongoing unauthorized activity within its systems. Its distribution centers remain operational, the company continues to accept orders and products continue to be shipped across its distribution network.
The company first disclosed the incident Aug. 28, saying it was investigating a cybersecurity incident involving third-party applications, unauthorized access and data exfiltration. At the time, McKesson said customers could experience intermittent service degradation that it believed might be related to the incident, but the company was not proactively disconnecting systems within its environment.
In its Aug. 29 update, McKesson said customers can continue connecting to and using its systems and services as intended.
The company said it expects to provide complimentary credit monitoring and identity protection services, along with a dedicated information line, to partners, customers and their patients whose data was exfiltrated.
McKesson said additional information about the nature and scope of the incident will be posted as its investigation progresses. The company has engaged cybersecurity industry experts to assist with its response.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
