UnitedHealth now estimates that 190 million people were impacted as a result of the cyberattack on its Change Healthcare unit last February—almost double previous estimates.
The attack disabled the company’s IT systems and affected treatment for months. It led to personal information like names, physical addresses, birth dates, Social Security numbers, driver’s license numbers, passport numbers, as well as medical and financial data being compromised. The company began notifying impacted customers in July 2024.
“The vast majority of those people have already been provided individual or substitute notice,” said Tyler Mason, a spokesperson for UnitedHealth Group, in an email to TechCrunch, which first reported the updated numbers.
“The final number will be confirmed and filed with the Office for Civil Rights at a later date,” he added. Mason said he was “not aware” of “any misuse of individuals’ information as a result of this incident” and said the company has “not seen electronic medical record databases appear in the data during the analysis.”
Personal data captured in ransomware attacks—a type of cyberattack in which criminals encrypt a company’s data and demand payment to unlock it—is often sold on online black markets and used for identity theft, scam calls, and phishing emails.
The hack is thought to have been carried out by the Russian-speaking AlphV/BlackCat ransomware group, which used a loophole in remote-access Citrix software to gain access to the company’s systems and lock up its data for ransom. The attack is expected to cost UnitedHealth from $2.3 billion to $2.5 billion. It made at least one ransomware payment of roughly $22 million.
Recommended by Our Editors
In December, the US Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) recommended that healthcare providers implement multi-factor authentication, encrypt patient data to safeguard it in case of a data breach, and undergo compliance checks to ensure their networks meet cybersecurity rules. It’s unclear if the Trump administration will pursue this.
Profits at UnitedHealth fell by more than a third in 2024, dropping from roughly $22.3 billion in 2023 to about $14.4 billion.
Like What You’re Reading?
This newsletter may contain advertising, deals, or affiliate links.
By clicking the button, you confirm you are 16+ and agree to our
Terms of Use and
Privacy Policy.
You may unsubscribe from the newsletters at any time.
About Will McCurdy
Contributor
Read the latest from Will McCurdy
UnitedHealth, one of the largest health insurance companies in the United States, has recently announced that they now estimate a staggering 190 million individuals were impacted by a cyberattack on their systems. This cyberattack, which occurred earlier this year, has raised major concerns about the security of personal and sensitive information held by insurance companies.
The attack, which targeted UnitedHealth’s IT systems, has potentially exposed vast amounts of personal data, including names, addresses, Social Security numbers, and medical information. This breach of security has left millions of individuals vulnerable to identity theft and other forms of cybercrime.
UnitedHealth is working diligently to address the breach and secure their systems to prevent future attacks. They are also offering credit monitoring and identity theft protection services to those affected by the cyberattack.
This incident serves as a stark reminder of the importance of cybersecurity and the need for companies to invest in robust security measures to protect their customers’ sensitive information. It also highlights the growing threat of cyberattacks on large corporations and the potential impact they can have on millions of individuals.
As more details emerge about the scope of the breach and the steps being taken to mitigate its effects, it is crucial for individuals to remain vigilant and take proactive steps to protect their personal information. Stay tuned for updates on this developing story.
Tags:
- UnitedHealth cyberattack
- 190 million affected
- UnitedHealth data breach
- Cybersecurity incident
- Healthcare cybersecurity
- UnitedHealth cyber threat
- Data breach impact
- UnitedHealth cyber incident
- Cybersecurity breach
- UnitedHealth data security.
#UnitedHealth #Estimates #Million #Impacted #Cyberattack
Leave a Reply