Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

Change Healthcare disclosed that ALPHV (BlackCat) affiliates used stolen credentials to access an unprotected Citrix management portal in February, exfiltrating patient and customer data (names, dates of birth, phone numbers, email addresses and other identifiers), encrypting systems and disrupting prescription and claims services; remediation costs have approached $1B, a $22M payment to extortionists was reported, and the company is notifying affected individuals beginning in late July.