How the ransomware attack at Change Healthcare went down: A timeline

Earlier this year, Change Healthcare, a UnitedHealth-owned health tech company, suffered a significant ransomware attack, resulting in what is likely one of the largest data breaches of U.S. health and medical data. The attack, attributed to the ALPHV/BlackCat ransomware gang, caused widespread outages across the healthcare sector, disrupting billing and prescription services. Although UnitedHealth paid a $22 million ransom for a "safe" copy of the stolen data, issues persisted as affected individuals began receiving breach notifications. UnitedHealth confirmed the breach impacted a substantial portion of the U.S. population, with potentially over 100 million individuals affected. The incident, rooted in compromised security protocols, highlights vulnerabilities in handling sensitive healthcare data and has prompted increased bounty efforts from the U.S. government to locate those responsible.

Opens on TechCrunch