UnitedHealth Group’s initial review of data from the February cyberattack on its Change Healthcare unit indicates that personal information was compromised, and a large number of Americans could be impacted. The health insurance provider stated that identifying and notifying those affected will likely take several months. In the meantime, it will offer support services such as free credit monitoring and identity theft protection.
UnitedHealth also revealed that hackers posted 22 screenshots of stolen data to the dark web, some of which included personally identifiable or protected health information. The company plans to provide official notifications once it confirms the specific information involved.
Meanwhile, UnitedHealth has reported progress in restoring services to customers. Approximately 99% of pharmacies can now process claims, while Change Healthcare’s payment processing has reached 86% of its pre-incident capacity. The unit handles about 6% of U.S. healthcare payments.
UnitedHealth further stated that 80% of Change’s functionality has been restored on its key platforms and products, with full restoration expected in the upcoming weeks.