Pharmaceutical giant McKesson has warned customers of "service degradation" following a cyberattack, raising operational concerns across its distribution network.

The warning, reported by The Record from Recorded Future News, signals that McKesson expects partial — rather than complete — disruption to its services. The company has not released the date of the attack, the systems affected, or the threat actor involved.

What did the company disclose?

McKesson used the specific phrase "service degradation" in its customer communications. In enterprise-IT terms, that wording typically signals that core systems remain partially operational but with reduced throughput, slower response times, or limited feature availability.

The distinction matters operationally. A full outage halts transactions outright; degradation slows them. Both scenarios trigger business-continuity procedures, but degradation often proves harder to diagnose because some operations continue normally while others lag.

Why does this concern enterprise IT?

McKesson operates one of the largest pharmaceutical distribution networks in the United States. The company sits between drug manufacturers and the pharmacies, hospitals, and clinics that dispense medication to patients. When a distributor of that scale reports service degradation, the impact cascades quickly to downstream customers.

For CIOs and supply-chain leaders, the warning raises immediate questions about order processing, inventory visibility, electronic data interchange (EDI) transactions, and regulatory compliance reporting.

What remains unknown?

The Record's initial report did not specify several critical details:

• The attack vector
• Whether customer or patient data was exposed
• The expected recovery timeline
• Which business units or service lines the incident hit
• Whether law enforcement or federal regulators received notification

How should IT leaders respond?

Enterprise IT teams that integrate with McKesson through EDI, API connections, or contracted services should treat the situation as ongoing and prepare for partial disruptions.

Recommended actions include:

• Confirm secondary fulfillment channels with alternative distributors
• Audit recent EDI transactions for processing delays or errors
• Verify business-continuity plans address degraded service, not only full outages
• Assign staff to monitor McKesson's official status communications

McKesson has yet to publish a public incident-disclosure page or regulatory filing tied to the warning. Until the company releases additional details, enterprise customers should assume the disruption remains active and plan for continued partial impact.