UnitedHealth Group Reports Largest U.S. Healthcare Data Breach

UnitedHealth Group (NYSE:UNH) disclosed a cyberattack on its tech unit last year, impacting the personal information of 190 million individuals, marking the largest healthcare data breach in U.S. history.

The breach involved Change Healthcare (NASDAQ:CHNG), UnitedHealth’s technology subsidiary. In October, the U.S. Department of Health and Human Services reported that the hack had affected 100 million people. However, the company has since updated the figure, with the final number to be confirmed and filed with the Department of Health and Human Services’ Office for Civil Rights.

The cyberattack, attributed to the "BlackCat" ransomware group, compromised doctors and medical practices across the U.S. healthcare system. Despite the scale of the breach, Change Healthcare stated it has not observed any misuse of the affected personal information. Additionally, electronic medical records were reportedly not included in the compromised data, according to their analysis.

Change Healthcare reassured stakeholders that it continues to monitor the situation closely and collaborate with authorities. While the company has identified vulnerabilities exploited by the attackers, it emphasized that ongoing efforts are in place to bolster security measures.

This incident highlights the growing cybersecurity challenges faced by the healthcare sector, which often houses sensitive personal and medical data. Companies like UnitedHealth and Change Healthcare are under increasing pressure to implement stronger defenses against cyber threats to protect patient and client information.

The breach underscores the importance of robust cybersecurity practices in safeguarding healthcare systems from evolving ransomware attacks. Both organizations have committed to transparency as investigations continue.