Change HealthCare falls victim to large-scale cyberattack

Change HealthCare, a subsidiary of UnitedHealth Group, was targeted by a large-scale cyber attack at the end of February 2024.

Change HealthCare is specialized in insurance claims processing and billing for thousands of pharmacies and medical care providers.

The BlackCat/ALPHV hacker group that accessed policyholders' health data demanded a 22 million USD ransom, which the company agreed to pay.

On 15 April 2024, another group of "RansomHub" hackers published sensitive data on the Dark Web. These hackers confirmed that they held 4 terabytes of data, which they threatened to sell to the highest bidder unless a ransom was paid.

This attack has so far cost UnitedHealth Group 872 million USD.