Samwise Healthcare IT Newsletter
Tuesday, September 22, 2026
ShinyHunters Breach at McKesson Exposes 6.4 Million Email Addresses
Healthcare distributor McKesson disclosed that a ShinyHunters cyberattack exposed 6.4 million unique email addresses along with personal health information for patients and business contacts. The attackers used vishing — voice phishing — to deceive two McKesson employees and gain access to Salesforce and Snowflake cloud instances. ShinyHunters claims to have downloaded 321 gigabytes of compressed data encompassing 284 million records, including patient names, dates of birth, health insurance details, and medical record numbers. The group demanded a $55 million ransom that McKesson refused to pay, prompting threats to release the data publicly. The company is notifying affected individuals under HIPAA breach notification requirements.
Sources: GovInfoSecurity
Congress Serves Subpoenas on Oracle Chairman Ellison and Oracle Health CEO Sicilia Over VA EHR Deal
Congressional investigators served subpoenas to Oracle chairman Larry Ellison and Oracle Health CEO Mike Sicilia over the troubled $27 billion Department of Veterans Affairs electronic health record modernization contract. The Oracle Health-VA deployment has been plagued by go-live failures including medication order errors, scheduling breakdowns, and patient safety alerts at active sites. The subpoenas request testimony and documents related to contract performance, oversight gaps, and communications between Oracle leadership and VA officials about delivery timelines and known system deficiencies. A House committee voted 19 to 0 to authorize the subpoenas, reflecting broad bipartisan concern over the stalled federal EHR program.
Sources: Becker’s Hospital Review
Health-ISAC Alerts Providers to Active ShinyHunters Vishing Campaign Targeting Healthcare
The Health Information Sharing and Analysis Center issued an urgent alert warning hospitals and healthcare providers that the ShinyHunters extortion group is actively targeting the sector with vishing — voice-based social engineering — attacks designed to trick employees into surrendering cloud platform credentials. The warning follows McKesson’s confirmed breach, where ShinyHunters used the same technique to extract patient and business data at scale. Health-ISAC advised security teams to implement stronger caller verification protocols, restrict cloud platform access from unverified devices, and review helpdesk procedures that permit credential resets via phone without secondary authentication. The group has demanded ransoms ranging into the tens of millions of dollars from healthcare targets.
Sources: Healthcare IT News
Oracle Health Extends AI Clinical Agent to Nursing Workflows in Oracle EHR
Oracle Health is expanding its AI clinical agent from physician-focused documentation support to nursing workflows, giving bedside nurses access to AI-generated shift handoff notes, priority task queues, and care escalation alerts directly within the Oracle EHR interface. The expansion follows pilot deployments at VA facilities, where Oracle reports nurses recorded measurable reductions in documentation time per patient encounter. The agent uses real-time vital sign trends and structured order data to surface priority alerts and suggest when patient status should be escalated. Oracle plans a phased commercial rollout through the fourth quarter of 2026, targeting full availability across its customer base in early 2027.
Sources: Healthcare Dive
Agentic AI Deployments in Healthcare Outpace Governance Policies, Analysis Finds
Healthcare organizations are deploying AI agents capable of autonomously executing multi-step clinical and administrative tasks — including ordering labs, adjusting medication plans, and processing prior authorizations — without human review at each decision point. A Healthcare Dive analysis finds existing AI governance policies were largely designed for advisory tools and fail to address the risks of autonomous agents acting independently on patient care. Experts urge health systems to establish agentic AI-specific policies defining which clinical actions require mandatory human oversight and what audit trails must be maintained for liability. The governance gap is most pronounced at smaller health systems where AI adoption has accelerated fastest.
Sources: Healthcare Dive
Senators Warner and Wyden Reintroduce Mandatory Healthcare Cybersecurity Legislation
Senators Mark Warner of Virginia and Ron Wyden of Oregon reintroduced legislation that would require hospitals and health systems above a defined size threshold to meet minimum federal cybersecurity standards as a condition of participation in Medicare and Medicaid. The Healthcare Cybersecurity Act also directs the Department of Health and Human Services to provide technical assistance and additional resources to rural and safety-net hospitals lacking dedicated security staff. The senators cited the 2024 Change Healthcare ransomware attack, which disrupted pharmacy and claims processing nationwide for weeks, as evidence that voluntary standards have proven insufficient. A similar version passed Senate committee review in the previous Congress.
Sources: Fierce Healthcare
TEFCA Network Tops 500 Million Records as Federal Enforcement Ramps Up in 2026
The Trusted Exchange Framework and Common Agreement network surpassed 500 million patient health records flowing through its nationwide exchange infrastructure in 2026, according to a Becker’s Hospital Review analysis of three key milestones. The Social Security Administration connected to TEFCA via Epic’s EHR, enabling disability determination timelines to be cut by more than 50 percent. New FHIR-based exchange capabilities under Common Agreement version 2.0 expanded API access for patients and providers. The Department of Health and Human Services separately announced additional investigative resources dedicated to enforcing information blocking rules, signaling stronger federal action against organizations that obstruct patient data access.
Sources: Becker’s Hospital Review
Luma Health Launches Navigator AI for Personalized Patient Outreach at Scale
Luma Health launched Navigator, an AI-powered patient engagement platform that personalizes appointment reminders, care gap alerts, and preventive care outreach based on individual patient records and social determinants of health data. The system integrates with major EHR platforms and supports multilingual communications, enabling healthcare organizations to automate outreach for complex patient populations without manual configuration for each demographic segment. Early deployment data from partner health systems showed statistically significant improvements in appointment adherence and preventive screening completion rates among previously hard-to-reach patients. Luma positions Navigator as a workforce multiplier enabling care management teams to sustain patient engagement at scale amid ongoing staffing constraints.
Sources: MobiHealthNews
Every newsletter preserved and searchable
Curated by JD · samwise.agency