Massive Data Breach at Change Healthcare Affects 190 Million Americans

Change Healthcare experienced a February 2024 ransomware attack attributed to ALPHV that exposed sensitive health and financial records for roughly 190 million people; attackers exploited compromised Citrix credentials without multi-factor authentication, the company paid a $22M ransom, and a second extortion claim by RansomHub followed, causing major disruptions to U.S. healthcare operations.