McKesson Corporation's FY2026 Form 10-K Item 1C cybersecurity disclosure describes its NIST CSF-aligned Cybersecurity Program, CIRP, third-party risk management, and Board oversight via the Audit and Compliance Committees. The filing explicitly states that as of March 31, 2026, McKesson is not aware of any cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, the company. No specific breach is disclosed.