LIVE MONITORING
Critical Confirmed Healthcare

Change Healthcare Ransomware Attack

Change Healthcare (UnitedHealth) data breach affecting 100.0M records.

9.7
Severity Score
Records Exposed
100.0M
Breach Date
February 2024
Attack Vector
Ransomware (ALPHV/BlackCat)
Discovered
February 2024
Users Notified
April 2024
Financial Impact
$1.6 Billion

Exposed Data Types

Medical Records SSN Names Financial Data Addresses

The Change Healthcare attack was the most disruptive healthcare breach in U.S. history, shutting down claims processing for thousands of healthcare providers and exposing data of approximately 100 million individuals.

The Ransom Payment

UnitedHealth Group confirmed paying a $22 million ransom to the ALPHV/BlackCat group. Despite the payment, the attackers failed to delete the stolen data, and it was later offered for sale by an affiliate.

Impact Assessment

Data Sensitivity
9.7
Scale
100.0M
Public Exposure
Critical