US to probe Change Healthcare's data protection standards as lawsuits mount

Change Healthcare was hit in February by an ALPHV/BlackCat ransomware attack that the group says resulted in a 6 TB data theft and wide disruption to pharmacy and hospital services; the company has been restoring services while Mandiant and Palo Alto Networks assist with forensics. The U.S. HHS Office for Civil Rights has opened an inquiry into potential HIPAA violations, a $22M bitcoin payment to an ALPHV wallet was observed, ALPHV’s leak sites have gone offline, and multiple class-action lawsuits have been filed against Change Healthcare.