Change Healthcare lists the medical data stolen in ransomware attack

UnitedHealth disclosed the types of sensitive medical and patient data stolen during the February ransomware attack on its subsidiary, Change Healthcare. The breach exposed substantial health insurance details, medical records, billing information, and personal identifiers of potentially a third of Americans. Despite not having exact numbers, UnitedHealth will mail breach notifications in July, with free credit monitoring and identity theft services available for those affected. The attack, attributed to the BlackCat ransomware gang, caused significant disruptions in the US healthcare system and has resulted in $872 million in losses to date, with the company's data now possibly compromised due to ransom non-compliance and secondary threats.

Opens on Bleeping Computer