What is McKesson's cybersecurity risk score?

McKesson has an AI-generated cybersecurity risk score of 833 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has McKesson experienced?

According to Rankiteo, McKesson currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has McKesson been affected by any supply chain cyber incidents ?

According to Rankiteo, McKesson has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does McKesson have SOC 2 Type 1 certification ?

According to Rankiteo, McKesson is not certified under SOC 2 Type 1.

Does McKesson have SOC 2 Type 2 certification ?

According to Rankiteo, McKesson does not hold a SOC 2 Type 2 certification.

Does McKesson comply with GDPR ?

According to Rankiteo, McKesson is not listed as GDPR compliant.

Does McKesson have PCI DSS certification ?

According to Rankiteo, McKesson does not currently maintain PCI DSS compliance.

Does McKesson comply with HIPAA ?

According to Rankiteo, McKesson is not compliant with HIPAA regulations.

Does McKesson have ISO 27001 certification ?

According to Rankiteo,McKesson is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does McKesson operate in ?

McKesson operates primarily in the Hospitals and Health Care industry.

How many employees does McKesson have ?

McKesson employs approximately 24,029 people worldwide.

Does McKesson own any subsidiaries ?

McKesson presently has no subsidiaries across any sectors.

How many LinkedIn followers does McKesson have ?

McKesson's official LinkedIn profile has approximately 568,750 followers.

What is the NAICS classification code for McKesson ?

McKesson is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does McKesson have a Crunchbase profile ?

No, McKesson does not have a profile on Crunchbase.

Does McKesson have a LinkedIn profile ?

Yes, McKesson maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mckesson.

How many cybersecurity incidents has McKesson experienced ?

As of July 30, 2026, Rankiteo reports that McKesson has not experienced any cybersecurity incidents.

How many peer or competitor companies does McKesson have ?

McKesson has an estimated 33,455 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

McKesson

Boost Score +25 with badge (5 left)

833

/1000

Good

858

/1000

Very Good

McKesson Vendor Cyber Rating & Cyber Score

https://www.mckesson.com/about-us/?utm_source=linkedin&utm_medium=social&utm_campaign=company+profile

Add Your Compliance Badge

Welcome to the official LinkedIn page for McKesson Corporation. We're an impact-driven healthcare organization dedicated to “Advancing Health Outcomes For All.” As a global healthcare company, we touch virtually every aspect of health. Our leaders empower our people to lead with a growth mindset and deliver excellence for our customers, partners, and the wellbeing of people, everywhere. We work with biopharma companies, care providers, pharmacies, manufacturers, governments, and others to deliver insights, products and services that make quality care more accessible and affordable. Delivering better health outcomes for our employees, our communities, and our environment. Every day, we strive to inspire and enable people to reach their

McKesson A.I CyberSecurity Scoring

Scoring History

McKesson

McKesson CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

McKesson Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for McKesson

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for McKesson in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for McKesson in 2026.

Incident Types McKesson vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for McKesson in 2026.

Incident History - McKesson (X = Date, Y = Severity)

Loading…

SUBSIDIARY

McKesson Subsidiaries

McKesson

Hospitals and Health Care

Website: https://www.mckesson.com/about-us/?utm_source=linkedin&utm_medium=social&utm_campaign=company+profile

Company Size: 10,000+ employees

CoverMyMedsIT Services and IT Consulting

Independent and Community PharmacyPharmaceutical Manufacturing

McKesson CompileTechnology, Information and Internet

Biologics by McKessonHospitals and Health Care

GenospaceData Infrastructure and Analytics

Loading…

McKesson Similar Companies

Hapvida NotreDame Intermédica

hapvida.com.br

Com 80 anos de experiência, a Hapvida é hoje a maior empresa de saúde integrada da América Latina. A companhia, que possui mais de 73 mil colaboradores, atende 16 milhões de beneficiários de saúde e odontologia espalhados pelas cinco regiões do Brasil. Todo o aparato foi construído a partir de uma visão voltada ao cuidado de ponta a ponta, a partir de 86 hospitais, 78 prontos atendimentos, 363 clínicas médicas e 305 centros de diagnóstico por imagem e coleta laboratorial, além de unidades especificamente voltadas ao cuidado preventivo e crônico. Dessa combinação de negócios, apoiada em qualidade médica e inovação, resulta uma empresa com os melhores recursos humanos e tecnológicos para os seus clientes.

NYU Langone Health

nyulangone.org

NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone No. 1 out of 118 comprehensive academic medical centers across the nation for four years in a row, and U.S. News & World Report recently ranked four of its clinical specialties No. 1 in the nation. NYU Langone offers a comprehensive range of medical services with one high standard of care across seven inpatient locations, its Perlmutter Cancer Center, and more than 320 outpatient locations in the New York area and Florida. The system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise. For more information, go to nyulangone.org and interact with us on LinkedIn, Glassdoor, and Indeed. More: NYU Grossman School of Medicine has trained thousands of physicians and scientists who have helped to shape the course of medical history since 1841. With more than 75 divisions of specialty care including comprehensive inpatient and outpatient programs for every stage of life, a multifaceted Research and Academic Center and the NYU Grossman Long Island School of Medicine focused on primary care, NYU Langone Hospital-Long Island joined NYU Langone Health as of August 1, 2019. At NYU Langone Hospitals, NYU Grossman School of Medicine, NYU Grossman Long Island School of Medicine and NYU Langone Health (collectively referred to as "NYU Langone"), we work collectively to achieve our mission: To care. To teach. To discover. We celebrate the inclusive excellence of the people that make us a world-class institution in patient care, education and science ("tripartite missions"). We strive to be a place where our exceptionally talented faculty, staff and students can thrive.

Duke University Health System

cb dukehealth.org

As a world-class academic and health care system, Duke Health strives to transform medicine and health locally and globally through innovative scientific research, rapid translation of breakthrough discoveries, educating future clinical and scientific leaders, advocating and practicing evidence-based medicine to improve community health, and leading efforts to eliminate health inequalities.

UT Southwestern Medical Center

utsouthwestern.edu

UT Southwestern is an academic medical center, world-renowned for its research, regarded among the best in the country for medical education and for clinical and scientific training, and nationally recognized for the quality of care its faculty provides to patients at UT Southwestern’s University Hospital & Clinics and affiliated institutions. The Medical Center includes three degree-granting institutions: UT Southwestern Medical School, UT Southwestern Graduate School of Biomedical Sciences, and UT Southwestern School of Health Professions. - The schools train nearly 3,700 medical, graduate, and health profession students, residents, and postdoctoral fellows each year. - Ongoing support from federal agencies, along with foundations, individuals, and corporations, provides more than $524 million per year to fund faculty research. - UT Southwestern physicians provide care in about 80 specialties to more than 117,000 hospitalized patients, more than 360,000 emergency room cases, and oversee nearly 3 million outpatient visits a year. - UT Southwestern has approximately 25,000 employees and an operating budget of $3.7 billion. - UT Southwestern is the #1 hospital in Dallas-Fort Worth for the ninth year in a row, according to U.S. News & World Report. In addition, 12 of our specialties are nationally ranked for 2025-2026 – the most of any hospital in Texas. Those specialties include: Cancer; Cardiology, Heart & Vascular Surgery; Diabetes & Endocrinology; Gastroenterology & GI Surgery; Geriatrics; Neurology & Neurosurgery; Obstetrics & Gynecology; Orthopedics; Otolaryngology – Ear, Nose & Throat; Pulmonology & Lung Surgery; Rehabilitation; and Urology.

Omega Healthcare Management Services

omegahms.com

Founded in 2003, Omega Healthcare Management Services® (Omega Healthcare) is an AI-driven healthcare solutions company that partners across the healthcare ecosystem to deliver breakthrough results by reimagining and elevating revenue operations. Powered by the Omega Digital Platform®, our agentic AI engine leverages adaptive intelligence to drive automation, complemented by deep human expertise to help optimize performance and deliver sustained financial and clinical outcomes—while enhancing patient satisfaction. Omega Healthcare empowers organizations across provider, payer, and life sciences sectors to navigate today’s healthcare challenges while building the agility to adapt as healthcare and technology continue to evolve rapidly. Recognized by industry analysts, Omega Healthcare has consistently been ranked a leader in driving operational performance excellence. For more information, visit www.omegahms.com

Clariane

cb clariane.com

A purpose-driven company, Clariane is the leading European community for care in times of vulnerability. Our Group’s purpose “To take care of each person’s humanity in times of vulnerability” is inspired by our three core values: trust, responsibility and initiative. With facilities at the heart of 700 cities and communities across six European countries, we are dedicated to standing alongside vulnerable individuals, ensuring our presence wherever they need us. Our expertise? Delivering our Positive Care approach through 3 areas of activity: - Care homes – we care. - Healthcare facilites and services – we cure. - Shared living solutions – we welcome and enliven. Relying on their diverse expertise, each year, our community unites, trains and supports around 63,000 employees who provide services to over 890,000 patients and residents in three main areas of activity: long-term care (Korian, Seniors Residencias, etc.), specialty care (Inicea, Ita, Grupo 5, Lebenswert, etc.), and community care (Âges & Vie...). In 2025, Clariane was awarded Top Employer certification in Europe and in each of the six countries where we operate: Germany (for the 5th consecutive year), France (for the 4th consecutive year), Belgium and Italy (for the 3rd consecutive years), and Spain and the Netherlands (for the 1st time). Our actions are guided every day by five key commitments: consideration, equity, innovation, proximity and sustainability. Our Clariane community: at your side, at every moment. #ClarianeAtYourSide #WeAreClariane #PurposeDrivenCompany

Molina Healthcare

molinahealthcare.com

Molina Healthcare is a FORTUNE 500 company that is focused exclusively on government-sponsored health care programs for families and individuals who qualify for government sponsored health care. Molina Healthcare contracts with state governments and serves as a health plan providing a wide range of quality health care services to families and individuals. Molina Healthcare offers health plans in Arizona, California, Florida, Idaho, Illinois, Kentucky, Massachusetts, Michigan, Mississippi, Nevada, New Mexico, New York, Ohio, South Carolina, Texas, Utah, Virginia, Washington and Wisconsin. Molina also offers a Medicare product and has been selected in several states to participate in duals demonstration projects to manage the care for those eligible for both Medicaid and Medicare.

Brigham and Women's Hospital

brighamandwomens.org

Boston's Brigham and Women's Hospital (BWH) is an international leader in virtually every area of medicine and has been the site of pioneering breakthroughs that have improved lives around the world. A major teaching hospital of Harvard Medical School, BWH has a legacy of excellence that continues to grow. With two outstanding hospitals, over 150 outpatient practices, and over 1,200 physicians, we serve patients from New England, throughout the United States, and from 120 countries around the world. The BWH name is a reflection of our history. In 1980 three of Boston’s oldest and most prestigious Harvard Medical School teaching hospitals - the Peter Bent Brigham Hospital, the Robert Breck Brigham Hospital, and the Boston Hospital for Women – merged to form Brigham and Women’s Hospital. As a national leader in improving health care quality and safety, we have helped to develop some of the industry’s best practices including computerized physician order entry (CPOE) to prevent medication errors. The CPOE is now a nationally-accepted safety practice. The BWH Biomedical Research Institute (BRI) is one of the most powerful biomedical research institutes in the world and the second largest recipient of National Institutes of Health (NIH) funding among independent hospitals in the United States. BWH has long had great success in research as measured by the number of important discoveries made, the size and scope of its research portfolio and the volume of publications annually. BWH is a training ground for physicians, nurses, and allied health professionals. We have 1,100 trainees in over 140 of the most sought after training programs in the world, and also host Harvard Medical School students in rotations throughout our programs. As our global health services expand, our clinical trainees have rich opportunities to contribute and learn in challenging environments around the world. Brigham and Women's Hospital is an EEO, AA, VEVRAA Employer.

Wellstar Health System

wellstar.org

At Wellstar Health System, our mission is to enhance the health and well-being of every person we serve. Nationally ranked and locally recognized for our high-quality care, inclusive culture and world-class doctors and caregivers, Wellstar is one of the largest, most integrated healthcare systems in Georgia. Our specialists and primary care providers work in a multidisciplinary environment with nearly 30,000 diverse team members throughout our hospitals, health parks and medical offices. Communities can also access our outpatient centers, a pediatric center, nursing centers, and hospice and home care services. We’re proud to be home to the second-largest Emergency Department in the country, as well as being the only system in Georgia operating multiple trauma centers. We’re also known for our exceptional work culture, featured on the Great Places to Work®, Fortune 100 Best Companies to Work For® and the Seramount Best Company for Multicultural Women® lists. We continue to attract the best and the brightest in healthcare. At a time when our industry is changing rapidly, Wellstar remains committed to exceeding expectations from our patients and team members, while transforming healthcare delivery. We stand behind our values to serve with compassion, pursue excellence and honor every voice.

Loading…

NEWS

McKesson CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2026 07:53 PM

First Look: SyberJet takes off and Kraken hits pause

SyberJet, a Phoenix-based jet startup led by Nikola founder Trevor Milton, is seeking to raise $1b at a $4b valuation, per the WSJ.

Read Article

October 30, 2025 07:00 AM

What is an AI Integrator & why are they crucial?

Discover the emerging role of AI Integrators and how they're embedding artificial intelligence into existing business systems.

Read Article

May 02, 2025 07:00 AM

Cramer's week ahead: Earnings from Disney, Palantir and Uber

CNBC's Jim Cramer on Friday highlighted the most market-moving events of next week.

Read Article

April 14, 2025 07:00 AM

Jim Cramer explains why these market themes are working right now

CNBC's Jim Cramer on Monday explained why he thinks certain sectors can do well on the market right now.

Read Article

March 04, 2025 08:00 AM

11 companies you’ll see at Ireland’s Cybersecurity Career Fair

Cyber Ireland in conjunction with Cyber Futures is hosting Ireland's first career fair dedicated specifically to cybersecurity.

Read Article

February 28, 2025 08:00 AM

Healthcare Procurement Has a Growing Hacking Problem

B2B supply chains are the unsung hero of global commerce. Their importance only grows when it comes to critical industries like healthcare,...

Read Article

February 18, 2025 08:00 AM

AI and VBC go mainstream in 2025 amid cybersecurity gains, expert predicts

Robert Connely of Pega says patching legacy systems will give way to true health IT modernization, a security breakthrough will lead...

Read Article

January 01, 2025 08:00 AM

Privacy & Cybersecurity Litigation To Watch In 2025

The crush of litigation accusing a wide range of website operators of unlawfully monitoring visitors' activities will continue to wind its...

Read Article

August 27, 2024 07:00 AM

McKesson to acquire controlling interest in cancer outfit for $2.5 billion

McKesson has signed a definitive agreement to acquire a controlling interest in Community Oncology Revitalization Enterprise Ventures (Core Ventures) for about...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…