Mega US healthcare payments network restores system 9 months after ransomware attack

Change Healthcare suffered a large ALPHV/BlackCat ransomware attack that disrupted clearinghouse services for months, affected roughly 100 million people and disrupted payments for the majority of U.S. hospitals; attackers used stolen credentials to access a Citrix portal lacking MFA, exfiltrated patient data (including names, emails, banking and claims records), UnitedHealth/Change Healthcare paid a $22M ransom, and remediation and provider assistance costs have reached into the billions while some business functions remained partially unrecovered.