UnitedHealth Group CISO: We had to ‘start over’ after Change Healthcare attack

UnitedHealth's Change Healthcare was hit by a February ransomware attack attributed to the ALPHV/BlackCat group that disrupted US healthcare providers and reportedly yielded roughly $22 million in ransom payments; UnitedHealth essentially rebuilt its IT environment (keeping only cabling) and engaged Mandiant for incident response. The report highlights the lengthy restoration work, frequent communications with customers and industry peers, and attention to the mental health and staffing needs of recovery teams.