Last Week in Ransomware: 04.22.2024

**Executive summary:** The report covers a high-impact ransomware extortion incident in which RansomHub claims to possess data stolen from Change Healthcare (with links to BlackCat/ALPHV activity), discusses published samples of patient records, notes alleged ransom payment activity and affiliate disputes, outlines regulatory and remediation consequences including OCR investigation and near-$1B recovery costs, and highlights broader trends of rising ransomware payments and the importance of resilience metrics.