UnitedHealth Group

UnitedHealth Group, parent company of Change Healthcare, reported a cyber-attack affecting 190 million individuals, an increase of 90 million from initial reports. As one of the largest healthcare payment processors, this incident is the most severe healthcare data breach of 2024. The breach, perpetrated by ransomware group ALPHV/Blackcat, led to substantial financial consequences with costs reaching $3.1 billion, according to the company's financial results. This breach has not only compromised the personal information of millions but also resulted in multiple lawsuits against UnitedHealth Group.

Source: https://www.hcinnovationgroup.com/cybersecurity/data-breaches/news/55263828/change-healthcare-tallies-190-million-data-breach-victims

TPRM report: https://scoringcyber.rankiteo.com/company/unitedhealth-group

"id": "uni000013125",
"linkid": "unitedhealth-group",
"type": "Breach",
"date": "1/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '190 million individuals',
                        'industry': 'Healthcare',
                        'name': 'UnitedHealth Group',
                        'size': 'Large',
                        'type': 'Parent Company'},
                       {'industry': 'Healthcare',
                        'name': 'Change Healthcare',
                        'size': 'Large',
                        'type': 'Subsidiary'}],
 'data_breach': {'number_of_records_exposed': '190 million',
                 'type_of_data_compromised': 'Personal information'},
 'description': 'UnitedHealth Group, parent company of Change Healthcare, '
                'reported a cyber-attack affecting 190 million individuals, an '
                'increase of 90 million from initial reports. As one of the '
                'largest healthcare payment processors, this incident is the '
                'most severe healthcare data breach of 2024. The breach, '
                'perpetrated by ransomware group ALPHV/Blackcat, led to '
                'substantial financial consequences with costs reaching $3.1 '
                "billion, according to the company's financial results. This "
                'breach has not only compromised the personal information of '
                'millions but also resulted in multiple lawsuits against '
                'UnitedHealth Group.',
 'impact': {'data_compromised': 'Personal information of 190 million '
                                'individuals',
            'financial_loss': '$3.1 billion',
            'legal_liabilities': 'Multiple lawsuits'},
 'ransomware': {'ransomware_strain': 'ALPHV/Blackcat'},
 'regulatory_compliance': {'legal_actions': 'Multiple lawsuits'},
 'threat_actor': 'ALPHV/Blackcat',
 'title': 'UnitedHealth Group Cyber-Attack',
 'type': 'Data Breach, Ransomware'}