logo

Round 2: Change Healthcare Targeted in Second Ransomware Attack

ID: bbfdb9a8-8bc6-54c9-bbb9-ead7ea849e93

STIX ID: report--bbfdb9a8-8bc6-54c9-bbb9-ead7ea849e93

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2024-04-08

Date Updated: 2026-04-21

Author: Dark Reading Staff

...
...

Change Healthcare, a UnitedHealthcare subsidiary, is reportedly being targeted by the RansomHub ransomware gang which claims to have stolen ~4TB of sensitive data (including US military personnel information, patient medical and financial records) and is demanding payment or threatening to sell the data within 12 days; the report also highlights speculation about ties or rivalry between RansomHub and ALPHV/BlackCat but no confirmation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.