October 25th, 2024

UnitedHealth Ransomware Attack Exposed 100M People

A ransomware attack on Change Healthcare compromised data of over 100 million individuals, including sensitive information. UnitedHealth faces financial losses estimated between $2.3 billion and $2.5 billion.

Read original articleLink Icon
UnitedHealth Ransomware Attack Exposed 100M People

A ransomware attack on UnitedHealth's subsidiary, Change Healthcare, has compromised the personal data of over 100 million individuals, as confirmed by the US Department of Health and Human Services' Office for Civil Rights. The breach, which occurred in February, is under investigation, and UnitedHealth has been notifying affected individuals since July. The stolen data includes names, addresses, birth dates, Social Security numbers, and medical information, which could facilitate identity theft and scams. The attack forced UnitedHealth to take its systems offline for about a month, disrupting various medical services. Despite paying ransoms totaling $22 million, some data was still leaked online. The AlphV/BlackCat ransomware group exploited a vulnerability in Citrix software to access Change Healthcare's systems, locking up 4TB of data. The financial impact of the breach on UnitedHealth is estimated to be between $2.3 billion and $2.5 billion.

- A ransomware attack exposed data of over 100 million people through Change Healthcare.

- The breach includes sensitive personal and medical information, raising concerns about identity theft.

- UnitedHealth has been notifying affected individuals since July, with ongoing investigations.

- The attack disrupted medical services for about a month due to system shutdowns.

- The financial repercussions for UnitedHealth are projected to be between $2.3 billion and $2.5 billion.

Link Icon 2 comments
By @gnabgib - 6 months
Discussion (73 points, 20 hours ago, 36 comments) https://news.ycombinator.com/item?id=41942103