UnitedHealth Group

UnitedHealth Group experienced a ransomware attack on February 21, which disrupted their services including medical claim handling and revenue cycle services. This resulted in severe delays in processing claims, pushing healthcare providers towards financial distress, with some nearly facing bankruptcy. The attack by the group BlackCat forced UnitedHealth to rebuild services and affected providers have started filing lawsuits due to not maintaining adequate cybersecurity measures, with allegations of sensitive information leaks. UnitedHealth has paid over $2 billion to affected providers and the data compromised in the attack remains undisclosed.

Source: https://www.hcinnovationgroup.com/cybersecurity/news/53099951/amidst-lawsuits-unitedhealth-publishes-timeline-for-product-restoration

TPRM report: https://scoringcyber.rankiteo.com/company/unitedhealth-group

"id": "uni1012070724",
"linkid": "unitedhealth-group",
"type": "Ransomware",
"date": "3/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'UnitedHealth Group',
                        'type': 'Healthcare'}],
 'attack_vector': 'Ransomware',
 'date_detected': '2023-02-21',
 'description': 'UnitedHealth Group experienced a ransomware attack on '
                'February 21, which disrupted their services including medical '
                'claim handling and revenue cycle services. This resulted in '
                'severe delays in processing claims, pushing healthcare '
                'providers towards financial distress, with some nearly facing '
                'bankruptcy. The attack by the group BlackCat forced '
                'UnitedHealth to rebuild services and affected providers have '
                'started filing lawsuits due to not maintaining adequate '
                'cybersecurity measures, with allegations of sensitive '
                'information leaks. UnitedHealth has paid over $2 billion to '
                'affected providers and the data compromised in the attack '
                'remains undisclosed.',
 'impact': {'downtime': 'Severe delays in processing claims',
            'financial_loss': '$2 billion',
            'legal_liabilities': 'Lawsuits filed by affected providers',
            'operational_impact': 'Rebuild services',
            'systems_affected': ['Medical claim handling',
                                 'Revenue cycle services']},
 'motivation': 'Financial Gain',
 'ransomware': {'ransomware_strain': 'BlackCat'},
 'regulatory_compliance': {'legal_actions': 'Lawsuits filed by affected '
                                            'providers'},
 'threat_actor': 'BlackCat',
 'title': 'UnitedHealth Group Ransomware Attack',
 'type': 'Ransomware'}