UnitedHealth admits IT security breach could 'cover substantial proportion of people in America'

UnitedHealth/Change Healthcare experienced a major ransomware attack beginning in February attributed to ALPHV, with attackers using pilfered remote-access credentials to operate inside the network, exfiltrate data, and post screenshots of protected health information and PII on the dark web; UnitedHealth reports a ransom payment (reported ≈ $22M), ongoing forensic review to identify impacted individuals, and significant financial impact (Q1 costs ~$870M, potentially up to $1.6B for the year).