logo

New ransomware group demands Change Healthcare ransom

ID: 101acb20-e63e-5786-85a9-09904b370eec

STIX ID: report--101acb20-e63e-5786-85a9-09904b370eec

Feed Name: Malwarebytes Blog

Threat Score
85/100

Date Published: 2024-04-10

Date Updated: 2026-04-28

...
...

The report details the February 2024 ransomware attack on Change Healthcare attributed to an ALPHV affiliate that disrupted US healthcare payment systems and resulted in a reported $22 million ransom payment; ALPHV subsequently disappeared in an apparent exit scam and a newcomer, RansomHub, has claimed possession of 4 TB of sensitive client data and listed Change Healthcare on its leak site, suggesting ongoing extortion and a significant data breach with wide impact on providers and patients.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.