Data stolen in Change Healthcare attack likely included U.S. service members, executive says

UnitedHealth Group's CEO told a Senate committee that a February ransomware attack on Change Healthcare—attributed to an ALPHV affiliate—compromised a substantial portion of Americans' data, may include current and former military personnel, and led to a $22 million ransom payment; lawmakers criticized the lack of MFA, legacy infrastructure and backup failures and urged baseline cybersecurity standards.