// OktaHIGH
ShinyHunters breached McKesson by calling the company's helpdesk and using vishing to reset Okta single sign-on credentials on August 21, 2026. The attackers gained access to internal Salesforce and Snowflake systems, exfiltrating approximately 1 terabyte of data including up to 284 million patient records (names, SSNs, addresses, medical histories). ShinyHunters demanded $55.2 million in ransom. This demonstrates that Okta authentication can be compromised through helpdesk social engineering even without exploiting Okta's software.
// Get alerts for Okta