**Cyberattack Disrupts Major U.S. Healthcare Network, Exposing Patient Data**
A ransomware attack on Change Healthcare, a key subsidiary of UnitedHealth Group, has severely disrupted operations across the U.S. healthcare system, causing widespread delays in prescription processing, insurance claims, and patient care. The incident, first detected on February 21, 2024, forced the company to take critical systems offline, affecting pharmacies, hospitals, and clinics nationwide.
The attack has been attributed to the BlackCat (ALPHV) ransomware group, which claimed responsibility and allegedly exfiltrated sensitive data, including patient records and financial information. While UnitedHealth has not confirmed the extent of the breach, reports suggest the hackers may have stolen terabytes of data, raising concerns about potential identity theft and fraud.
The fallout has been substantial: pharmacies reported delays in filling prescriptions, healthcare providers struggled with billing disruptions, and some patients faced out-of-pocket costs for medications. The American Hospital Association (AHA) warned of "significant financial strain" on providers, with some smaller clinics at risk of closure due to cash flow interruptions.
UnitedHealth has since restored some services, but full recovery remains ongoing. The incident underscores the growing threat of ransomware to critical infrastructure, particularly in healthcare, where delays can directly impact patient safety. Federal agencies, including the HHS and FBI, are investigating the attack, while lawmakers have called for stricter cybersecurity regulations in the sector.
Source: https://www.businesskorea.co.kr/news/articleView.html?idxno=258464
Show Creators Studios cybersecurity rating report: https://www.rankiteo.com/company/show-creators-inc
"id": "SHO1765339395",
"linkid": "show-creators-inc",
"type": "Ransomware",
"date": "12/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'customers_affected': 'Thousands of auto dealerships',
'industry': 'Automotive technology',
'location': 'North America',
'name': 'CDK Global',
'size': 'Large',
'type': 'Software provider'}],
'attack_vector': 'Unknown',
'customer_advisories': 'Public disclosure of the incident',
'data_breach': {'data_encryption': 'Yes'},
'date_detected': '2024-06-19',
'date_publicly_disclosed': '2024-06-19',
'description': 'CDK Global, a major provider of software solutions to '
'automotive dealerships, suffered a ransomware attack that '
'forced the company to shut down most of its systems. The '
'incident caused widespread disruptions to dealership '
'operations, including sales, financing, and service '
'scheduling. The attack highlights the growing threat of '
'ransomware to critical infrastructure providers and the '
'cascading effects on downstream businesses.',
'impact': {'brand_reputation_impact': 'Significant',
'downtime': 'Ongoing as of 2024-06-20',
'operational_impact': 'Widespread disruptions to dealership '
'operations, including sales, financing, and '
'service scheduling',
'systems_affected': "CDK Global's software systems for auto "
'dealerships'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'ransomware': {'data_encryption': 'Yes'},
'references': [{'date_accessed': '2024-06-20',
'source': 'BleepingComputer',
'url': 'https://www.bleepingcomputer.com/news/security/cdk-global-ransomware-attack-disrupts-auto-dealerships-across-north-america/'}],
'response': {'communication_strategy': 'Public disclosure of the incident',
'containment_measures': 'Shut down most systems',
'incident_response_plan_activated': 'Yes',
'recovery_measures': 'Ongoing'},
'title': 'Ransomware Attack on CDK Global Disrupts Auto Dealerships Across '
'North America',
'type': 'Ransomware'}