McKesson has notified victims and federal regulators of a data breach that leaked millions of patient records. CPO Magazine has the news.

McKesson learned of the incident in late August. An investigation revealed that the data breach leaked protected health information (PHI); the company has not disclosed the nature of the stolen patient records, though. The data breach has been linked to a prolific hacking group called ShinyHunters, who took credit for the incident.

McKesson still hasn’t determined if the data breach will have a material impact on its financial condition or disrupt its operations. They also haven’t directly identified the threat actor or how they gained access. The number of affected individuals has also not been revealed as of this writing.

Updates will be provided when more details are released.