Massive Ransomware Attack Exposes Health Data of 100 Million Americans

Change Healthcare suffered a large ransomware attack by the ALPHV/BlackCat group, resulting in the compromise of personal health information for approximately 100 million individuals. This breach, confirmed by the U.S. Department of Health and Human Services, included sensitive data such as names, addresses, and health records, underscoring the need for enhanced security measures in digital health environments. Following the attack, Change Healthcare initiated a complex notification process for affected individuals, revealing the breach's scale, which impacted nearly one-third of the U.S. population. The Office for Civil Rights is investigating the company's adherence to HIPAA regulations, while any potential financial penalties for UnitedHealth Group may be minimal, despite significant lapses in security disclosed during recent congressional hearings.

Opens on Fast Company