284 Million Medical Records Stolen 😱 + Malware Hit Claude Users 🔓

Two stories from today's threat landscape are worth your attention: a historic healthcare breach exposing hundreds of millions of patients, and a malware campaign that shows how quickly stolen browser sessions can turn into stolen accounts (even AI accounts).

Healthcare Giant McKesson Breached: 284 Million Records Exposed

McKesson, one of the largest healthcare and pharmaceutical distributors in the U.S., was hit by a data breach that attackers say exposed roughly 284 million patient records. The hacking group ShinyHunters tricked employees into handing over their login credentials, then used that access to steal about a terabyte of data — including Social Security numbers, birth dates, medical record numbers, and even prescription and allergy information. When McKesson didn't pay the group's reported $55 million ransom demand, the stolen data went public. If you've ever filled a prescription or visited a provider that uses McKesson's systems, your information may be part of this haul, so it's worth watching for phishing attempts and considering a credit freeze.

Read more

Malware Hijacked Claude Accounts — Here's What Anthropic Did About It

Anthropic, the company behind the AI chatbot Claude, warned users that common "infostealer" malware — including Vidar, Lumma, and RedLine — had hijacked their browser sessions. Once inside, the malware let attackers act as the logged-in user, burning through usage limits and, in some cases, racking up unauthorized charges. Anthropic responded by logging out compromised sessions, removing saved payment methods, and refunding confirmed bad charges. The bigger takeaway: this wasn't a flaw in Claude itself — it's a reminder that malware quietly sitting on your own computer can hijack any account you're logged into, from AI tools to your bank. If you use Claude or similar services, scan your device for malware before re-entering any payment details.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.