InfoSecBulletin Cybersecurity for mankind
UnitedHealth confirmed that the ransomware attack on its Change Healthcare unit last February impacted about 190 million Americans, nearly double earlier estimates. The U.S. health insurance company confirmed the latest figures to TechCrunch on Friday after the markets closed.
“Change Healthcare has determined the estimated total number of individuals impacted by the Change Healthcare cyberattack is approximately 190 million,” said Tyler Mason, a spokesperson for UnitedHealth Group in an email to TechCrunch. “The vast majority of those people have already been provided individual or substitute notice. The final number will be confirmed and filed with the Office for Civil Rights at a later date.”
CVSS 10.0 Flaw
Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE
Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day
OTP glitch disrupted NID services across the country
Google to pay Texas $1.4 billion for location tracking practices
YouTube geo-blocks at least 4 Bangladeshi TV channels in India
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
UnitedHealth’s spokesperson said the company was “not aware of any misuse of individuals’ information as a result of this incident and has not seen electronic medical record databases appear in the data during the analysis.”The February 2024 cyberattack is the largest medical data breach in U.S. history, leading to months of healthcare system outages. Change Healthcare, a major health tech company and UnitedHealth subsidiary, processes a significant amount of health data and healthcare claims in the U.S.
The data breach resulted in the theft of massive quantities of health and insurance-related information, some of which was published online by the hackers who claimed responsibility for the breach.
Change Healthcare paid at least two ransoms to stop the stolen files from being published. UnitedHealth initially reported that about 100 million individuals were affected when it submitted a preliminary analysis to the Office for Civil Rights, which investigates data breaches.
Change Healthcare’s data breach notice revealed that cybercriminals stole personal information, including names, addresses, dates of birth, phone numbers, email addresses, and government IDs like Social Security numbers, driver’s license numbers, and passport numbers.
The stolen health data includes diagnoses, medications, test results, treatment plans, and health insurance details. It also contains financial and banking information from patient claims.
It was later learned that the BlackCat ransomware gang, aka ALPHV, was behind the attack. UnitedHealth Group’s CEO Andrew Witty testified that the hackers accessed Change’s systems using a stolen account credential that lacked multi-factor authentication.
