McKesson Corporation

Profile narrative

McKesson Corporation operates as a major healthcare services and pharmaceutical distribution company in the United States. Its core business involves the procurement, storage, and delivery of prescription drugs, over‑the‑counter medications, and medical‑surgical supplies to a wide range of customers, including retail pharmacies, hospitals, long‑term care facilities, and physician practices. In addition to distribution, McKesson provides technology solutions that support electronic health records, revenue cycle management, and supply chain analytics for healthcare providers. The company also offers specialty services such as oncology drug distribution and patient support programs. Through its network, McKesson helps ensure that medications and supplies reach the point of care efficiently and securely. Its operations are centered in the United States, with a headquarters located there.

McKesson is distinguished by its deep integration into the U.S. pharmaceutical supply chain, where it ranks among the largest distributors by volume and revenue. The firm’s scale enables it to negotiate favorable terms with manufacturers while maintaining stringent regulatory compliance with agencies such as the FDA and DEA. Beyond logistics, McKesson has developed proprietary platforms for data analytics and clinical decision support, aiming to improve medication safety and operational efficiency for its clients. The recent cybersecurity incident highlighted the company’s reliance on third‑party cloud and identity services, including Okta for single sign‑on, Salesforce for customer relationship management, and Snowflake for data warehousing. Attackers used voice phishing to compromise employee credentials, gaining access to these environments and exfiltrating a large volume of patient‑related data. This event underscored both the extent of McKesson’s digital footprint and the challenges of securing complex, interconnected healthcare IT systems. Despite the breach, the company reported no confirmed material impact on its core services at the time of disclosure.

Incidents

1 incident linked to this organisation.