A Second Gang Shakes Down UnitedHealth Group for Ransom

In a complex development following the February Change Healthcare cyberattack, the cybercrime gang RansomHub is now demanding UnitedHealth Group pay a ransom for 4TB of sensitive data allegedly stolen by BlackCat, a ransomware-as-a-service group. Despite UnitedHealth Group previously paying a $22 million ransom to BlackCat to secure a decryptor key and prevent a data leak, RansomHub's demand highlights the unreliable nature of negotiating with cybercriminals. The stolen data reportedly includes personal information of millions, including active U.S. military and Navy personnel, alongside medical records and insurance information. UnitedHealth Group has acknowledged awareness of RansomHub's claims and is cooperating with authorities, while cybersecurity experts caution against payment, suggesting the incident could be part of a broader trend of criminal infighting and attempts to confuse law enforcement efforts.

Opens on BankInfoSecurity