Insurance company UnitedHealth Group is confirming a ransomware attack earlier this year affected the private data of over 100 million people. The number was published in the US Department of Health and Human Services Office of Civil Rights (OCR) Breach Report on Thursday, making it the largest healthcare data breach on the list.
- Home
- Technology
- News
UnitedHealth data breach leaked info on over 100 million people
UnitedHealth’s Change Healthcare told the US Health Department it has sent over 100 million notices to people regarding the February ransomware breach.


Hacker group Blackcat, also known as ALPHV, claimed responsibility for the February attack on Change Healthcare that caused widespread disruptions for healthcare providers processing bills, claims, payroll, and prescriptions for weeks.
According to the HHS FAQs page, Change Healthcare told OCR on October 22nd that it’s sent people about 100 million individual notices regarding this breach.
Stolen information may include:
As reported by Bleeping Computer, UnitedHealth CEO Andrew Witty’s written testimony (PDF) to a House committee said the threat actors got in by using stolen credentials for a Citrix remote access service that lacked multifactor authentication.
On February 12, criminals used compromised credentials to remotely access a Change Healthcare Citrix portal, an application used to enable remote access to desktops. The portal did not have multi-factor authentication. Once the threat actor gained access, they moved laterally within the systems in more sophisticated ways and exfiltrated data. Ransomware was deployed nine days later.
UnitedHealth paid the group a $22 million ransom. However, another operation threatened to continue leaking the data and may have secured a second ransom payment.

PTI expels five lawmakers for defying party policy
- 5 hours ago
Karachi police bust betel nut smuggling hidden in cement sacks
- 6 hours ago
WhatsApp introduces new feature to show how many people are typing in group chats
- 8 hours ago
Kim Jong-un offers full support to Russia in Ukraine war
- 7 hours ago

Emergency vaccination reduced deaths by nearly 60% during epidemics, study finds
- 8 hours ago

Indian drone strike kills 3 separatist leaders in Myanmar
- 5 hours ago

Sindh police give 10-day deadline to personnel to quit gutka, mawa use
- 8 hours ago

Wildlife force deployed as no-bird zones enforced near Lahore airport
- 10 hours ago

High risk near rivers as Tarbela spillways open today
- 9 hours ago
Iran confirms assassination attempt on President Pezeshkian amid Israeli airstrikes
- 10 hours ago
Rawalpindi to Multan bus meets accident; 5 in critical condition
- 11 hours ago
Frontier Constabulary to become countrywide force under new ordinance
- 6 hours ago