UnitedHealth says Change hackers stole health data on 'substantial proportion of people in America'

UnitedHealth Group has disclosed that its subsidiary, Change Healthcare, was subjected to a ransomware attack which resulted in the large-scale theft of private healthcare data. The stolen data includes personal and protected health information that could affect a significant portion of the U.S. population. Despite paying ransoms to two different hacking groups, including a new entity named RansomHub, the data has been partly leaked online. UnitedHealth is still assessing the full extent of the breach, expecting to spend several months reviewing the compromised data before notifying affected individuals. This cyberattack has caused widespread operational disruptions across U.S. healthcare facilities, with UnitedHealth projecting losses over $870 million due to the incident.

Opens on TechCrunch