Stolen Change Healthcare data could contain information on ‘a substantial portion’ of Americans

Change Healthcare suffered a February cyberattack attributed to ransomware operators (ALPHV/BlackCat) that reportedly resulted in the theft of roughly 4 TB of data — including partner agreements, invoices, Medicare claims, and individual patient records — and subsequent extortion via RansomHub. The company paid a ransom, investigators observed large fund movements consistent with laundering, and the incident has drawn significant financial impact (reported losses of hundreds of millions) and congressional scrutiny due to potential exposure of sensitive health data affecting a substantial portion of Americans.