Change Healthcare

The Change Healthcare data breach in February 2024 significantly impacted over 100 million individuals, marking the largest-ever healthcare data breach in the US. An extensive cyber attack disrupted IT operations, affecting numerous applications, pharmacies, and healthcare providers. Sensitive personal and medical information such as names, Social Security numbers, and treatment details were compromised. The incident led to substantial costs, with UnitedHealth Group reporting $1.1 billion in related expenses. Despite ransom payments, issues with the hacker group BlackCat/ALPHV and subsequent attempts by RansomHub to extort the company exacerbated the situation.

Source: https://securityaffairs.com/170258/data-breach/change-healthcare-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/change-healthcare

"id": "cha000102624",
"linkid": "change-healthcare",
"type": "Breach",
"date": "10/2024",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Over 100 million individuals',
                        'industry': 'Healthcare',
                        'location': 'US',
                        'name': 'Change Healthcare',
                        'type': 'Company'}],
 'data_breach': {'number_of_records_exposed': 'Over 100 million',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Medical Information']},
 'date_detected': 'February 2024',
 'description': 'The Change Healthcare data breach in February 2024 '
                'significantly impacted over 100 million individuals, marking '
                'the largest-ever healthcare data breach in the US. An '
                'extensive cyber attack disrupted IT operations, affecting '
                'numerous applications, pharmacies, and healthcare providers. '
                'Sensitive personal and medical information such as names, '
                'Social Security numbers, and treatment details were '
                'compromised. The incident led to substantial costs, with '
                'UnitedHealth Group reporting $1.1 billion in related '
                'expenses. Despite ransom payments, issues with the hacker '
                'group BlackCat/ALPHV and subsequent attempts by RansomHub to '
                'extort the company exacerbated the situation.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Treatment details'],
            'financial_loss': '$1.1 billion',
            'systems_affected': ['Applications',
                                 'Pharmacies',
                                 'Healthcare providers']},
 'motivation': 'Financial Gain',
 'threat_actor': ['BlackCat/ALPHV', 'RansomHub'],
 'title': 'Change Healthcare Data Breach',
 'type': 'Data Breach'}