Healthcare cyberattacks hit pacemakers and millions of patient records

{
  "signal_id": "ff3771b5-6e18-5232-a56d-43e2b76647c6",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-08-31T22:10:38+00:00",
  "company": {
    "name": "McKesson",
    "domain": "mckesson.com"
  },
  "data": {
    "url": "https://www.theregister.com/cyber-crime/2026/08/31/healthcare-cyberattacks-hit-pacemakers-and-millions-of-patient-records/5293537",
    "title": "Healthcare cyberattacks hit pacemakers and millions of patient records",
    "excerpt": "Security McKesson admits breach as ShinyHunters demands $55.2M Two major healthcare businesses, Boston Scientific and McKesson, disclosed more details over the weekend about separate cyberattacks that disrupted global operations and resulted in stolen patient data, respectively. Medical-device maker Boston Scientific, whose IT systems were hacked by unknown intruders last week , said the cyberattack remains ongoing. It also noted that pacemakers and other heart devices implanted after the August 25 breach cannot provide remote monitoring and data transmission as intended. “New remote monitoring communicators cannot be activated, thus available device data will NOT be transmitted to remote patient management systems until the communicator can be activated,” the medtech firm said in a late Friday update. This applies to all new cardiac rhythm management implants other than insertable cardiac monitors (ICM). ICM devices must be activated using the Boston Scientific Clinic Assistant app to ensure the device correctly records patients’ heart rhythms, the company added. Because of the cyberattack, “new ICMs are unable to pair to the patient remote monitoring mobile phone, therefore available episode data recorded by the ICM will NOT be transmitted to the remote monitoring system until the ICM can be paired to the patient mobile app,” according to the update. The devices will still...",
    "summary": "McKesson confirmed a data breach after the ShinyHunters group claimed to have stolen millions of patient records from its Snowflake and Salesforce instances and demanded a $55.2 million ransom.",
    "planning": false,
    "image_url": "https://image.theregister.com/259951.jpg?imageId=259951&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683",
    "confidence": 1,
    "published_at": "2026-08-31T22:10:38Z",
    "vulnerability": "Intrusion into Snowflake and Salesforce instances resulting in exfiltration of patient data, with ShinyHunters demanding a $55.2M ransom.",
    "article_sentence": "Meanwhile, in another cybersecurity incident that has been very publicly claimed by the criminal perpetrator: pharmaceutical and medical supply giant McKesson over the weekend confirmed an intrusion after ShinyHunters on Friday told The Register it broke into the company’s Snowflake and Salesforce instances and stole millions of patients’ data.",
    "amount_normalized": 55200000
  }
}

curl https://signals.autobound.ai/v1/signals/ff3771b5-6e18-5232-a56d-43e2b76647c6 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"mckesson.com","limit":20}'