McKesson Corporation (MCK) — ESG & Values Scores

Environment story

McKesson discloses minimal quantitative environmental data. The 10-K explicitly acknowledges climate change risks (physical, regulatory, transition) but provides no Scope 1, 2, or 3 emissions figures, no net-zero target date, and no verified decarbonization investments. The company notes exposure to climate-driven supply-chain disruption and inventory spoilage but frames climate primarily as a business risk rather than an operational footprint to be managed. No evidence of carbon offset reliance or greenwashing claims detected. Governance disclosure flags sustainability goal revision risk ('may determine that it is in the best interests of the Company...to prioritize other business investments over...sustainability goals'). Overall environmental transparency and commitment are below sector standards.

Criticisms on file

No quantified emissions targets or reporting; sustainability goals may be subordinated to business priorities per 10-K disclosure
Source: MCK 10-K Item 1A Risk Factors, 'Evolving expectations and regulatory requirements related to governance and sustainability matters'

Disclosed initiatives

Climate Risk Management

Company acknowledges climate change risks in risk factors including physical risks (extreme weather, sea-level rise), transition risks (regulatory/technology changes), and supply-chain disruption. Indicates adaptation of strategies responsive to environmental changes.

Social story

McKesson provides limited disclosed social metrics. No CEO-to-worker pay ratio, workforce diversity percentages, or turnover rate disclosed in 10-K. Union standing and labor relations are not mentioned. The company reports significant opioid litigation liabilities ($5.7 billion accrued as of March 31, 2026), with ongoing controlled-substance distribution claims presenting reputational and financial risk. Labor recruitment/retention discussed as competitive challenge but no union opposition or suppression activities documented. Supply-chain human-rights risks (e.g., cobalt, lithium) not addressed. Diversity and inclusion initiatives not mentioned. Overall social disclosure is sparse; the opioid liability dominates the social risk profile.

Criticisms on file

Opioid Distribution Litigation and Settlement Liabilities: Company is defendant in numerous lawsuits alleging controlled-substance (opioid) distribution violations, public nuisance, and negligence. Estimated accrued liability of $5.7 billion at March 31, 2026. Multiple state consent decrees govern opioid distribution. Ongoing regulatory scrutiny and reputation damage.
Source: MCK 10-K Item 1A Risk Factors, 'We experience costly legal disputes, government actions, and adverse publicity regarding our role in distributing controlled substances such as opioids'; Financial Note 17, 'Commitments and Contingent Liabilities'
Healthcare Fraud and Abuse Exposure: Company subject to Anti-Kickback Statute, False Claims Act scrutiny, and fraud/waste/abuse investigations by federal and state entities.
Source: MCK 10-K Item 1A Risk Factors, 'We are subject to extensive and frequently changing laws relating to healthcare fraud, waste, and abuse'
No disclosed formal labor relations, union agreements, or DEI program quantification
Source: MCK 10-K MD&A and Notes - no diversity or union-standing disclosures found

Disclosed initiatives

Employee Retention and Talent Acquisition

Risk factor acknowledges competition to attract and retain qualified employees, including key executives. No specific diversity, equity, or inclusion programs disclosed.

Governance story

McKesson exhibits standard corporate governance structure with disclosed board independence and single-class share structure (no dual-class voting detected). Board composition and independence percentage not specified in 10-K excerpt. The company faces significant regulatory and litigation oversight: opioid claims, healthcare fraud/waste/abuse investigations, cybersecurity incidents, antitrust settlements (notably $444 million antitrust gains in FY2025), and consumer-protection compliance burdens. DEA, FDA, state pharmacy boards, and CMS impose extensive inspection and compliance regimes. Lobbying expenditure and political stance not disclosed. The company's governance risk profile is dominated by regulatory complexity and litigation exposure rather than structural voting-rights concerns. Shareholder proposal activity not detailed in excerpt.

Criticisms on file

Controlled Substance Distribution Regulatory Scrutiny: DEA oversight, state-level consent decrees, and potential state taxes/assessments on opioid distribution. Risk of increased compliance costs and loss of distribution licenses.
Source: MCK 10-K Item 1A Risk Factors, 'We are subject to extensive, complex, challenging, and frequently changing healthcare, environmental, and other laws...'
Antitrust Litigation and Settlements: Company received $444 million in antitrust legal settlement gains in FY2025 and $23 million in FY2026, indicating prior antitrust exposure.
Source: MCK 10-K Item 7 MD&A, 'Overview of Consolidated Results,' discussing antitrust settlement receipts
Cybersecurity Breach and Data Protection Risk: Company acknowledges cybersecurity incidents affecting protected health information, personal data, and proprietary information, with potential regulatory fines and litigation.
Source: MCK 10-K Item 1A Risk Factors, 'We experience cybersecurity incidents that might significantly compromise our technology systems'
Healthcare Fraud/Waste/Abuse Exposure: Federal and state investigations, potential qui tam actions, Anti-Kickback Statute violations, and loss of Medicare/Medicaid participation risk.
Source: MCK 10-K Item 1A Risk Factors, 'We are subject to extensive and frequently changing laws relating to healthcare fraud, waste, and abuse'

Disclosed initiatives

Regulatory Compliance and Quality Assurance

Company subject to extensive DEA, FDA, state boards of pharmacy, CMS, and other regulatory requirements. Conducts routine and ad hoc inspections, maintains operating/quality/regulatory/security standards for pharmaceutical distribution.
Cybersecurity and Data Protection Governance

Company addresses cybersecurity incident risk, data governance structures, AI safeguards, and privacy/data protection compliance across multiple jurisdictions.

These are Missionomics' own editorial scores — directional signals built from disclosed facts under a published method, not certifications or definitive ratings of McKesson Corporation. Coverage and confidence vary by data point, and figures can lag real-world changes. Read the full Methodology for sourcing, scoring, and correction details — or open McKesson Corporation in the app for interactive charts and portfolio building.

More in Healthcare

Eli Lilly and Company (LLY) Johnson & Johnson (JNJ) AbbVie Inc. (ABBV) UnitedHealth Group Incorporated (UNH) Merck & Co., Inc. (MRK) Thermo Fisher Scientific Inc. (TMO)