Multiple healthcare giants hit by data breaches affecting patient records, social security numbers, and even implanted cardiac devices

Date:
Tue, 01 Sep 2026 21:20:00 +0000

Description:
Boston Scientific and McKesson are working on restoring services after being struck by disruptive cyberattacks.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter McKesson confirmed ShinyHunters breached its Snowflake and Salesforce, stealing 284M patient records Data includes names, contact info, SSNs, and health details; ransom demand was $55.2M Boston Scientific removed attackers but faces CRM device activation issues; attribution not confirmed Last week, two major healthcare organizations suffered highly disruptive cyberattacks: Boston Scientific, and McKesson. We now have more details about both those attacks, and it seems at least one is the work of the infamous ShinyHunters extortion group.

McKesson confirmed having been struck by ShinyHunters, just a few days after the threat actor claimed responsibility. The group told The Register they broke into the companys Snowflake and Salesforce instances and stole millions of patients data. The company later issued a statement, saying the stolen
data belonged to its Oncology & Multispecialty and Medical-Surgical business units. A spokesperson told The Register multiple employees were targeted with a vishing attack. Latest Videos From TechRadar Watch full video here: Boston Scientific works on restoring systems The group told the publication it stole more than 284 million records of patient data and demanded $55.2 million from the victims. They are saying the stolen batch includes patient tames, postal and email addresses, phone numbers, Social Security numbers (SSN), and
details regarding their health condition. Whether the claims are true, and to what extent, remains to be seen after the investigation.

Boston Scientific, on the other hand, said it successfully removed the attackers from its infrastructure, but added that the investigation into the attack remains ongoing. It also said that new Cardiac Rhythm Management (CRM) devices, implanted after August 25, cannot be activated, and the data they generate will not automatically be transmitted to remote patient management systems. You may like US healthcare AI platform Xsolis confirms data breach that affects 1.4 million individuals Boston Scientific says cyberattack is causing a global disruption to medical device operations US healthcare software giant Unlimited Technology Systems admits hackers may have stolen sensitive data of 3.8 million people

Newly implanted ICMs (insertable cardiac monitors) must be activated using
the Boston Scientific Clinic Assistant app to enable the ICM to properly record episodes, it explained. New ICMs are unable to pair to the patient remote monitoring mobile phone, therefore available episode data recorded by the ICM will NOT be transmitted to the remote monitoring system until the ICM can be paired to the patient mobile app. Episodes will continue to be
recorded by the ICM and can be transmitted to the remote monitoring system
via an in-person interrogation with the Clinic Assistant app by selecting the Interrogate button.

Boston Scientific is yet to name ShinyHunters as the perpetrators , and the group has not yet publicly claimed responsibility for the attack. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Via The Register The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/multiple-healthcare-giants-hit-by-data- breaches-affecting-patient-records-social-security-numbers-and-even-implanted- cardiac-devices


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)