💰💣
UnitedHealth Group (UHG) Security Incident
21/02/2024
579 days ago
Resolved
Incident Overview
Situation Description
UnitedHealth Group (UHG) subsidiary Change Healthcare experienced a significant cyberattack on February 21, 2024, leading to widespread disruption in healthcare services and concerns about compromised patient data.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
HealthcareGeographic Scope
National (US)Response Actions
Isolated Compromised Systems
Paid a Ransom
Offered Post-Breach Remediation Services
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$22,000,000 USDRecords Affected
0Data Types Compromised
PII (Personally Identifiable Information)
PHI (Protected Health Information)
Financial Data (Credit Cards, Bank Accounts)
Primary Impacts
Operational Disruption
Financial Loss
Data Exposure
Reputational Damage
Key Decisions Made
Senator Cassidy requested information from UHG regarding its response to the cyberattack and the lack of MFA on the affected Change Healthcare system.; UHG reportedly paid approximately $22 million to the ALPHV Blackcat ransomware group to prevent the public release of stolen data.; UHG advanced more than $7 billion in funding to providers to mitigate the financial impact of the cyberattack.
Technical Analysis
Attack Method
Unpatched Vulnerability
Threat Actor Attribution
ALPHV Blackcat
RansomHub
Vulnerability / Tool
MFA (lack of)
Additional Information
Quick Facts
- Company:
- UnitedHealth Group (UHG)
- Date:
- 21/02/2024
- Status:
- Resolved
- Decision Maker:
- Senator Bill Cassidy
- Position:
- Ranking Member of the Senate Health, Education, Labor, and Pensions (HELP) Committee
- Published:
- 14/05/2024
Source Information
Original Query
Change Healthcare SEC 10-Q filing discussion of financial impact from ALPHV attackTimeline
Information Published
14/05/2024
Incident Occurred
21/02/2024 (579 days ago)
Status: Resolved
Estimated resolution based on age