UnitedHealth now says 190 million impacted by 2024 data breach

UnitedHealth confirmed that the February 2024 ransomware attack on its subsidiary Change Healthcare, attributed to the BlackCat/ALPHV group, resulted in theft of ~6 TB of data and affected an estimated 190 million individuals; attackers encrypted systems, disrupted claims and pharmacy operations, demanded and received ransom payments (allegedly $22M and additional payments), and subsequently leaked stolen sensitive data (including health records, insurance details, and in some cases SSNs), producing hundreds of millions to billions in losses and making this the largest US healthcare data breach on record.