In February 2024, UnitedHealth Group publicly disclosed that its subsidiary Change Healthcare had suffered a cyberattack, disrupting related healthcare claims and payment services [1]. Subsequent company updates noted that systems were being restored and an investigation was underway to determine whether data had been exfiltrated [2]. An update on April 22, 2024 stated that initial review indicated the affected files could cover personal and health information for a substantial proportion of people in the United States [3].
Backfill: this event became public on Feb 22, 2024 and we added it on Nov 8, 2026. It is not a new event.
CriticalMonitoringBackfillOfficially confirmed
Change Healthcare Hit by Cyberattack, Causing Widespread Disruption to U.S. Healthcare Claims and Prescription Processing
1 min read
- Disclosed
- Feb 22, 2024
- Occurred
- Feb 21, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Healthcare
What to do nowOur advice
The April 22, 2024 update stated that preliminary review found affected files could involve personal and health data for a substantial proportion of the U.S. population [3].
Timeline
Technical details
Source-Supported Details
Rely only on official updates from UnitedHealth Group and do not trust unsolicited notifications claiming to represent the company [1].
Source excerpt: "UnitedHealth Group (NYSE: UNH) is announcing support for people who may be concerned about their personal data potentially being impacted based on preliminary findings from the ongoing investigation and review of the data involved in the malicious criminal cyberattack on Change Healthcare." [1].
Source excerpt: "UnitedHealth Group continues to make substantial progress in mitigating the impact to consumers and care providers of the unprecedented cyberattack on the U.S. health system and the Change Healthcare claims and payment infrastructure." [2].
Source excerpt: "health system and the Change Healthcare services, while continuing to expand financial assistance to affected providers." [3].
References
Official / primary3
- [1]
“UnitedHealth Group (NYSE: UNH) is announcing support for people who may be concerned about their personal data potentially being impacted based on preliminary findings from the ongoing investigation and review of the data involved in the malicious criminal cyberattack on Change Healthcare.”
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.