Aug 31, 2026 · 12 min
ShinyHunters claims massive McKesson healthcare breach
ShinyHunters claims another health giant breach, PaperCut rushes second emergency patch, US bans foreign grid tech
The episode examines an unverified claim involving millions of healthcare records alongside software flaws and a new U.S. power-grid security restriction.
- 1ShinyHunters claims it stole 284 million McKesson records through compromises involving voice phishing and major cloud platforms.
- 2PaperCut faces another emergency patch as attackers continue probing bypasses in widely used print-management software.
- 3The White House restricts foreign-made bulk power equipment over concerns that hidden access could threaten the U.S. grid.
Don't miss
The episode’s clearest flashpoint is ShinyHunters’ unverified claim that it stole 284 million McKesson healthcare records.
The brief
David Shipley leads with ShinyHunters’ unverified claim that it stole 284 million McKesson healthcare records after compromising voice phishing, Okta, Salesforce, and Snowflake systems.
The McKesson story raises a central cybersecurity problem: a huge alleged breach can demand attention before investigators or the company confirm what happened.
PaperCut returns to the headlines with another emergency patch, showing how attackers can keep finding ways around fixes in widely deployed print-management software.
The episode also covers a Rhysida extortion attempt involving Berlin and critical WordPress flaws, broadening the picture beyond one alleged healthcare intrusion.
The White House’s ban on foreign-made bulk power grid equipment frames cybersecurity as infrastructure policy, driven by concern over possible backdoors.