UnitedHealth Reveals 100M Compromised in Change Healthcare Breach

UnitedHealth/Change Healthcare disclosed a February ransomware attack by BlackCat/ALPHV that affected roughly 100 million Americans and led to a $22 million ransom payment; a subsequent attack by RansomHub exfiltrated about 4 TB of medical and financial records and threatened to sell the data. Attackers used previously compromised credentials and the victim lacked multifactor authentication, causing widespread healthcare service delays and exposure of highly sensitive PII and medical information.