UnitedHealth Paid Ransom After Cyberattack on Change Healthcare

UnitedHealth Group (UNH) disclosed that it paid a ransom in response to the February cyberattack targeting its subsidiary, Change Healthcare. The attack compromised personal data, affecting not only UnitedHealth’s 152 million customers but also a broader segment of the population due to Change Healthcare’s extensive role in payment and revenue cycle management in the healthcare industry. Despite the ransom payment, UnitedHealth emphasized its collaboration with law enforcement and cybersecurity firms to investigate the incident thoroughly and support affected individuals. The company acknowledged that it is actively monitoring online forums where hackers distribute or exchange compromised data packets and has established a dedicated website and call center to offer identity theft protection and credit monitoring for two years.

UnitedHealth: Personal Information of Millions May Have Been Breached in Cyberattack

UnitedHealth Group Inc. disclosed that personal information of a substantial portion of Americans may have been compromised in a cyberattack that targeted its Change Healthcare business earlier this year. The company emphasized that there are no indications that full medical histories or doctor charts were released, but it could take months to identify and notify those affected. UnitedHealth confirmed that screenshots containing protected health information and personally identifiable information were briefly posted on the dark web, and the company is closely monitoring the situation. Affected individuals will receive free credit monitoring and identity theft protection while UnitedHealth continues to restore services disrupted by the attack. The healthcare giant has also provided billions of dollars in financial assistance to healthcare providers impacted by the incident.

UnitedHealth: Breach May Affect ‘Substantial’ Number of Americans

Personal information potentially covering a large portion of the US population may have been compromised in a cyberattack on Change Healthcare, acquired by UnitedHealth Group. While medical histories and doctor charts appear secure, the company is investigating and expects notification of affected individuals to take months. Some protected health information was briefly posted online on the dark web, and UnitedHealth is monitoring the situation. Free credit monitoring and identity theft protection are available to those impacted, and federal investigators are examining the breach. UnitedHealth has faced financial losses due to the attack and is working to restore disrupted services.

Scroll to Top