UnitedHealth estimates 190M people impacted by Change hack
pChange Healthcare now estimates that 190 million people were affected in the massive cyberattack that took down its services nearly a year agoppUnitedHealth Group Changes parent company said in a statement to Fierce Healthcare that the vast majority of people impacted have received an individual or substitute notice about the breach The healthcare giant said the number will be confirmed and filed with the Department of Health and Human Services Office for Civil Rights OCR at a later datepp
ppChange Healthcare is not aware of any misuse of individuals information as a result of this incident and has not seen electronic medical record databases appear in the data during the analysis according to the statementpp
pp
ppIn a previous estimate filed with the OCR in October Change projected that 100 million people were affected by the breach UnitedHealth Group CEO Andrew Witty told legislators last summer during a hearing on the cyberattack that a third of Americans likely were impactedppIn an update filed to its website earlier this month Change said it has notified the affected customers for which it has an address on file It did note that it may not have sufficient addresses for all potentially impacted individuals It said it does not anticipate identifying additional customers that were impactedpp
ppChanges systems were breached in February 2024 by a hacking gang operating as ALPHV or BlackCat The hackers breached a server that did not have twofactor authentication enabled using stolen credentials and moved within the system for several days exfiltrating data before deploying ransomwareppUnitedHealth filed an initial breach notification in July though the sheer scale of the breach made the data analysis a lengthy process UHG began the notification process last June reaching out to organizations with members or patients who may have been affectedppThe cyberattack posed a significant financial cost to UnitedHealth with the company projecting that it would take a 29 billion hitppIndividuals who were impacted by the breach can access free credit monitoring provided by UnitedHealthcare herep
ppChange Healthcare is not aware of any misuse of individuals information as a result of this incident and has not seen electronic medical record databases appear in the data during the analysis according to the statementpp
pp
ppIn a previous estimate filed with the OCR in October Change projected that 100 million people were affected by the breach UnitedHealth Group CEO Andrew Witty told legislators last summer during a hearing on the cyberattack that a third of Americans likely were impactedppIn an update filed to its website earlier this month Change said it has notified the affected customers for which it has an address on file It did note that it may not have sufficient addresses for all potentially impacted individuals It said it does not anticipate identifying additional customers that were impactedpp
ppChanges systems were breached in February 2024 by a hacking gang operating as ALPHV or BlackCat The hackers breached a server that did not have twofactor authentication enabled using stolen credentials and moved within the system for several days exfiltrating data before deploying ransomwareppUnitedHealth filed an initial breach notification in July though the sheer scale of the breach made the data analysis a lengthy process UHG began the notification process last June reaching out to organizations with members or patients who may have been affectedppThe cyberattack posed a significant financial cost to UnitedHealth with the company projecting that it would take a 29 billion hitppIndividuals who were impacted by the breach can access free credit monitoring provided by UnitedHealthcare herep
