Change Healthcare

The Change Healthcare data breach, reported to have affected 190 million individuals, has become the largest healthcare-related cybersecurity incident of 2024. After initial reports in July, an additional 90 million victims have been identified, significantly increasing the breach's magnitude. The financial repercussions are substantial, with UnitedHealth Group, Change Healthcare's parent company, incurring costs of $3.1 billion, as disclosed in their financial results. The breach is attributed to the ransomware group ALPHV/Blackcat. In the aftermath, several healthcare organizations have commenced litigation against UnitedHealth Group, highlighting the breach's far-reaching impact on the healthcare industry and its patrons.

Source: https://www.hcinnovationgroup.com/cybersecurity/data-breaches/news/55263828/change-healthcare-tallies-190-million-data-breach-victims

TPRM report: https://scoringcyber.rankiteo.com/company/change-healthcare

"id": "cha000012825",
"linkid": "change-healthcare",
"type": "Breach",
"date": "1/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '190 million individuals',
                        'industry': 'Healthcare',
                        'name': 'Change Healthcare',
                        'type': 'Company'}],
 'data_breach': {'number_of_records_exposed': '190 million'},
 'date_detected': 'July 2024',
 'description': 'The Change Healthcare data breach, reported to have affected '
                '190 million individuals, has become the largest '
                'healthcare-related cybersecurity incident of 2024. After '
                'initial reports in July, an additional 90 million victims '
                "have been identified, significantly increasing the breach's "
                'magnitude. The financial repercussions are substantial, with '
                "UnitedHealth Group, Change Healthcare's parent company, "
                'incurring costs of $3.1 billion, as disclosed in their '
                'financial results. The breach is attributed to the ransomware '
                'group ALPHV/Blackcat. In the aftermath, several healthcare '
                'organizations have commenced litigation against UnitedHealth '
                "Group, highlighting the breach's far-reaching impact on the "
                'healthcare industry and its patrons.',
 'impact': {'financial_loss': '$3.1 billion',
            'legal_liabilities': ['Several healthcare organizations have '
                                  'commenced litigation against UnitedHealth '
                                  'Group']},
 'ransomware': {'ransomware_strain': 'ALPHV/Blackcat'},
 'regulatory_compliance': {'legal_actions': ['Several healthcare organizations '
                                             'have commenced litigation '
                                             'against UnitedHealth Group']},
 'threat_actor': 'ALPHV/Blackcat',
 'title': 'Change Healthcare Data Breach',
 'type': 'Data Breach'}