UnitedHealth Reports Major Data Breach Affecting 100 Million

UnitedHealth Group has confirmed that the Change Healthcare data breach, which occurred in February 2024, affected the personal information of 100 million individuals, marking it as the largest healthcare data breach in U.S. history. The breach involved the ransomware group ALPHV/BlackCat, which gained access through stolen employee credentials and disrupted operations, including claims processing, across the healthcare sector. Affected data includes sensitive information such as Social Security numbers, health insurance details, and financial records. UnitedHealth's CEO Andrew Witty testified before Congress that nearly a third of Americans' health information was compromised, underscoring the significant implications for patient privacy. The breach has prompted widespread concern and regulatory scrutiny, as the scale of exposure extends beyond just the direct victims. Notifications regarding the breach have been ongoing since late July, with the final tally announced in October 2024.