Ransomware gang starts leaking alleged stolen Change Healthcare data

The RansomHub extortion gang has started to release what it claims to be corporate and patient data stolen from United Health's subsidiary, Change Healthcare, escalating a complex extortion scheme following a February cyberattack. This attack, linked to the BlackCat/ALPHV ransomware group, disrupted U.S. healthcare billing services severely. Even after the BlackCat group ceased operations amid allegations of an exit scam involving a $22 million ransom from Change Healthcare, the affiliate known as "Notchy" has partnered with RansomHub to demand another ransom. Despite not confirming any ransom payment, Change Healthcare faces a renewed threat as attackers begin leaking sensitive data, including patient information, and threaten to sell it unless their demands are met within five days.

Opens on BleepingComputer