Industry
McKesson Confirms Data Breach Affecting Oncology and Medical-Surgical Customers
McKesson disclosed a cyberattack involving third-party applications that resulted in data theft affecting a subset of customers in its oncology and medical-surgical distribution businesses. The company confirmed unauthorized access occurred but has not yet specified the types of data compromised or the number of affected customers. The incident affects healthcare providers that rely on McKesson's pharmaceutical distribution and specialty pharmacy services. Medicaid health plans and state agencies contracting with affected providers may face downstream notification requirements depending on whether protected health information or Medicaid beneficiary data was accessed.
Why it mattersMedicaid managed care organizations and FFS providers using McKesson oncology or medical-surgical distribution services may need to assess HIPAA breach notification obligations and supply chain continuity risks.