Back from the Brink: UnitedHealth Offers Sobering Post-Attack Update

UnitedHealth Group disclosed that its subsidiary Change Healthcare suffered at least two ransomware attacks — first attributed to BlackCat/ALPHV and later to RansomHub — which disrupted U.S. healthcare operations, led to a ransom payment, and allegedly resulted in the theft of roughly 4TB of company information. The company reports substantial restoration of services (pharmacies and claims processing nearing pre-incident levels), ongoing forensic analysis expected to take months, and coordination with law enforcement while providing resources for affected customers.