UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’

UnitedHealth confirmed a ransomware attack on its Change Healthcare subsidiary beginning February 21 that led to exfiltration of protected health information affecting a substantial portion of Americans. The incident caused nationwide disruptions at pharmacies and hospitals, resulted in published stolen files on a criminal leak site (RansomHub) and involvement of the ALPHV ransomware group, and has caused significant operational and financial losses including an $870M reported impact and at least one reported ransom payment.