McKesson confirms data theft in cyberattack involving third-party apps