McKesson said unauthorized access and data exfiltration tied to a cybersecurity incident was limited to certain third-party applications affecting a subset of customers within its Oncology & Multispecialty business.
The company said in a Sept. 21 update that the incident also primarily involved business contact and order data related to its Medical-Surgical business.
McKesson said its investigation, supported by cybersecurity experts, has found no indication to date that data associated with its other business units, including North American Pharmaceutical Distribution or CoverMyMeds, was affected.
The company said it continues to serve customers across all of its lines of business.
McKesson said it is committed to informing affected individuals and will provide notifications in accordance with applicable law. The company also directed individuals who believe they may have been affected to a substitute notice containing additional information about the incident and available resources.
The Irving, Texas-based company first disclosed the cybersecurity incident in August.
At the Becker's Perioperative Summit, taking place September 14–15 in Chicago, perioperative leaders and healthcare executives will focus on improving operating room efficiency, enhancing patient safety, optimizing staffing and driving innovation across surgical services. Apply for complimentary registration now.
