BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

A BlackCat/ALPHV ransomware intrusion against Change Healthcare in late February disrupted prescription drug services nationwide; a traceable cryptocurrency payment of about $22 million was observed and a BlackCat affiliate alleges the group withheld his share and still holds roughly 4 TB of exfiltrated sensitive data (including Medicare and major insurance/pharmacy partners). The affiliate’s disclosure and prior law-enforcement actions appear to have prompted BlackCat to cease operations or attempt an exit scam, leaving victims at continued risk of data exposure despite reported ransom payments.