UnitedHealth updates number of data breach victims to 190 million

UnitedHealth's Change Healthcare suffered a ransomware attack that impacted roughly 190 million people; attackers likely accessed health insurance details, medical records metadata, billing/payment data, and PII including Social Security numbers. The company paid a reported $22 million ransom, portions of the stolen data were later posted on a leak site amid disputes among the criminals, and HHS/OCR is coordinating large-scale breach notifications for affected patients and providers.