Breach, Data Security, Ransomware

Updated Change Healthcare breach toll reaches nearly 190M

Change Healthcare logo close up on website page

UnitedHealth Group disclosed that nearly 190 million Americans had their data compromised following the ALPHV/BlackCat ransomware attack against Change Healthcare last February, indicating an almost twofold increase in impacted individuals from prior estimates that had already made the incident the largest healthcare breach on record, according to TechCrunch.

Attackers who infiltrated Change Healthcare using unsecured account credentials were not only able to exfiltrate individuals' names, birthdates, home and email addresses, Social Security numbers, and other government IDs but also their health insurance details, diagnoses, test and imaging results, treatment plans, and banking details, noted UnitedHealth in its updated data breach notice. "The vast majority of those people have already been provided individual or substitute notice. The final number will be confirmed and filed with the Office for Civil Rights at a later date," said UnitedHealth spokesperson Tyler Mason, who added that there has been no evidence suggesting misuse of the stolen information.

An In-Depth Guide to Ransomware

Get essential knowledge and practical strategies to protect your organization from ransomware attacks.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds