logo

ALPHV steps up laundering of Change Healthcare ransom payments

ID: 0be9673f-c698-5832-ad85-bd52f6546b9e

STIX ID: report--0be9673f-c698-5832-ad85-bd52f6546b9e

Feed Name: CyberScoop

Threat Score
80/100

Date Published: 2024-04-05

Date Updated: 2026-04-21

Author: AJ Vicens

...
...

The report covers ALPHV's Feb 21 ransomware attack on Change Healthcare that disrupted pharmacy and provider payment processing across the U.S., reporting an alleged ~350 BTC (reported ~$22M) ransom and subsequent laundering activity observed by blockchain intelligence firms; it also details a dispute with an affiliate known as "notchy," who claims to have been cheated out of proceeds and to possess exfiltrated data from multiple healthcare partners, raising concerns of further data exposure and follow-on targeting.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.