284 million patient records were stolen from McKesson
Assessment
The figure entered circulation on 28 August as "284 million patient records" and was repeated as "284 million patients" by several outlets. The same day, ShinyHunters told BleepingComputer that it is "a raw count of approximately 284 million data records, or lines, rather than a count of unique individuals" and that the group "does not know how many unique people are in those records". CyberInsider updated its article at 6:07 PM ET to reflect this. McKesson has published no count of records or individuals, and its data review was still "in its early stages" on 8 September.
Where this claim appeared
Cyberinsider · 2026-08-28
https://cyberinsider.com/mckesson-data-breach-exposing-284-million-patients/What “Superseded” means
Reported accurately at the time, then corrected by the original source. Recorded because the original version usually continues circulating long after the correction.
2 of 5 · rating scale
Assessed in
McKesson Data Breach: ShinyHunters, One Phone Call, and 284 Million Rows of Patient DataThink this assessment is wrong? Report an error.