Breachesby GlyphChange Healthcare
Disclosed Feb 22, 2024192,700,000 affectedConfirmed
Ransomware attack on Change Healthcare exposes data of about 190 million people
UnitedHealth Group disclosed in an SEC filing that an attacker had accessed Change Healthcare systems on February 21, 2024, disrupting claims and pharmacy payments nationwide. The ALPHV/BlackCat attack exposed contact, insurance, health and billing data of about 190 million people, and UnitedHealth confirmed paying a $22 million ransom.
What is known
| People affected | 192,700,000 (as reported by the organization) |
|---|---|
| Disclosed | Feb 22, 2024 |
| Discovered | Feb 21, 2024 |
| Happened | Feb 12, 2024 |
| Attack | Ransomware |
| Data exposed | NamesAddressesPhone numbersHealthInsuranceFinancialSocial Security numbersGovernment IDsPayment cardsDates of birth |
| Sector | Healthcare · US |
| Status | Confirmed |
| Lawsuit or fine | Consolidated class actions in Minnesota federal court; Nebraska attorney general lawsuit (Dec 2024); HHS OCR investigation opened March 2024 |
Sources
California Attorney General breach notice: Change HealthcareWashington Attorney General breach notice: Change HealthcareDelaware DOJ breach notice: Change HealthcareOregon DOJ breach notice: Change HealthcareNebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million AmericansUnitedHealth hikes number of Change cyberattack breach victims to 190MHHS Office for Civil Rights Issues Letter and Opens Investigation of Change Healthcare CyberattackUnitedHealth Group Form 8-K, Item 1.05 (Feb 22, 2024)Texas Attorney General data security breach report BR-0004611: Change HealthcareVermont Attorney General: 2024-07-29 Change Healthcare Data Breach Notice to ConsumersHHS OCR breach report (archive, resolved): Change Healthcare (Business Associate, MN)
Notices filed
Other breaches at Change Healthcare
History of this record
empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsfby backfillSource
empty to https://ago.vermont.gov/document/2024-07-29-change-healthcare-data-breach-notice-consumersby backfillSource
["names","addresses","phone","health","insurance","financial"] to ["names","addresses","phone","health","insurance","financial","ssn","government-id","payment-card","dob"]by backfillSource
190000000 to 192700000by backfillSource
empty to Consolidated class actions in Minnesota federal court; Nebraska attorney general lawsuit (Dec 2024); HHS OCR investigation opened March 2024by seedSource
["names"] to ["names","addresses","phone","health","insurance","financial"]by seedSource
192700000 to 190000000by seedSource
2024-08-03 to 2024-02-22by seedSource
empty to UnitedHealth Group disclosed in an SEC filing that an attacker had accessed Change Healthcare systems on February 21, 2024, disrupting claims and pharmacy payments nationwide. The ALPHV/BlackCat attack exposed contact, insurance, health andby seedSource
empty to Ransomware attack on Change Healthcare exposes data of about 190 million peopleby seedSource
empty to organizationby backfillSource
empty to 192700000by backfillSource
[] to ["names"]by backfillSource
unknown to ransomwareby backfillSource
empty to 2024-02-21by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.