UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

A BlackCat/ALPHV affiliate carried out a ransomware attack against Change Healthcare (part of UnitedHealth Group), using stolen credentials to remain in the network for days, exfiltrate large volumes of PHI/PII, and disrupt healthcare payment and prescription systems nationwide; UnitedHealth acknowledged paying a ransom and faces extensive remediation, significant financial loss (~$872M reported), and potential exposure affecting a substantial portion of U.S. patients, while extortion actors have begun leaking stolen data and Congress and law enforcement have become involved.