Ransomware gang claims they stole 6TB of Change Healthcare data

BlackCat/ALPHV ransomware gang claims responsibility for a cyberattack on UnitedHealth Group (UHG) subsidiary, Optum, causing outage of Change Healthcare platform used by over 70,000 US pharmacies. They allegedly stole 6TB of sensitive data from the platform's network, relating to thousands of healthcare providers, insurance firms, and pharmacies, among others. The stolen data allegedly includes medical, insurance, dental records, payments, claims, patient's personally identifiable information (PII), and active US military/navy personnel PII. UnitedHealth Group systems were not affected and new electronic claim procedures have been implemented. They denied using a ScreenConnect auth bypass flaw, contradicting earlier sources. US agencies earlier warned that BlackCat primarily targets the US healthcare sector.

Opens on BleepingComputer