For the first time since news broke about a ransomware attack on Change Healthcare, the company has released details about the data stolen during the attack.<\/p>\n
First, a quick refresher: On February 21, 2024, Change Healthcare experienced serious system outages due to a cyberattack. The incident led to widespread billing outages, as well as disruptions at pharmacies across the United States. Patients were left facing enormous pharmacy bills, small medical providers teetered on the edge of insolvency, and the government scrambled to keep the money flowing and the lights on. The ransomware group ALPHV<\/a> claimed responsibility for the attack.<\/p>\n But shortly after, the ALPHV group disappeared in an unconvincing exit scam<\/a> designed to make it look as if the FBI had seized control over the group\u2019s website. Then a new ransomware group, RansomHub, listed the organization as a victim on its dark web leak site, saying it possessed 4 TB of \u201chighly selective data,\u201d relating to \u201call Change Health clients that have sensitive data being processed by the company.\u201d<\/p>\n In April, parent company UnitedHealth Group released an update<\/a>, saying:<\/p>\n \u201cBased on initial targeted data sampling to date, the company has found files containing protected health information (PHI) or personally identifiable information (PII), which could cover a substantial proportion of people in America.\u201d<\/p>\n<\/blockquote>\n Now, Change Healthcare has detailed<\/a> the types of medical and patient data that was stolen. Although Change cannot provide exact details for every individual, the exposed information may include:<\/p>\n Change Healthcare added:<\/p>\n \u201cThe information that may have been involved will not be the same for every impacted individual. To date, we have not yet seen full medical histories appear in the data review.\u201d<\/p>\n<\/blockquote>\n Change Healthcare says it will send written letters\u2014as long as it has a person’s address and they haven’t opted out of notifications\u2014once it has concluded the data review.<\/p>\n There are some actions you can take if you are, or suspect you may have been, the victim of a data breach<\/a>.<\/p>\n Malwarebytes has a new free tool for you to check how much of your personal data has been exposed online. Submit your email address (it\u2019s best to give the one you most frequently use) to our free Digital Footprint scan<\/a> and we\u2019ll give you a report and recommendations.<\/p>\n\n
\n
\n
Protecting yourself after a data breach<\/h2>\n
\n
Check your digital footprint<\/strong><\/h2>\n