UnitedHealth hid its Change Healthcare data breach notice for months

Change Healthcare, a UnitedHealth-owned health technology provider, was the victim of a February 2024 ransomware attack that exfiltrated sensitive medical data affecting an estimated 100+ million people, caused months-long outages across U.S. healthcare systems, and led to a ransom payment; the company later delayed notifications, published a breach notice hidden from search engines using a "noindex" tag, and has faced state interventions and litigation.