Massive Data Breach at Change Healthcare Affects 190 Million Americans

In February 2024 Change Healthcare was hit by a ransomware attack attributed to ALPHV that exposed data for approximately 190 million individuals after attackers used compromised Citrix credentials without multi-factor authentication; Change Healthcare paid $22 million and was later targeted by a separate extortion claim from RansomHub claiming 4 TB of data, causing widespread disruption to U.S. healthcare claims processing and patient care, with legal actions and notifications to affected individuals ongoing.