Change Healthcare confirms ransomware hackers stole medical records on a ‘substantial proportion’ of Americans

Change Healthcare suffered a February ransomware attack tied to the ALPHV group (and subsequent activity by RansomHub) that disrupted U.S. healthcare operations, forced system shutdowns, and resulted in the theft and leak of medical records and sensitive personal data for a substantial portion of Americans; UnitedHealth reportedly paid ransom demands, and the attackers exploited stolen credentials that lacked multi-factor authentication.