Something doesn't look right?

Change Healthcare Data Breach May 2024

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

High

Organization

Change Healthcare

Threat Actor

RansomHub

aka

Actor Type

Organized Crime

Type of Breach

Unknown

News Timeline

Aug 12, 2024

Additional Reports

The cyber assault on healthcare: What the Change Healthcare breach reveals csoonline.com - The February 2024 ransomware attack on Change Healthcare, inflicted by the ALPHV/BlackCat group, exploited compromised credentials to access an inadequately secured Citrix portal, highlighting the cri...
Show more

Jul 17, 2024

Total Loss Reported over 1.1B

UnitedHealth Sticks to 2024 Outlook Despite Strong Quarter With Costs From Massive Cyberattack High securityweek.com - Hackers gained access to Change Healthcare's systems in February and executed a ransomware attack that encrypted and froze significant portions of it, disrupting insurance claims processing nationwide...
Show more

Jul 11, 2024

Preliminary Reviews

Change Healthcare Data Breach: Over 110 Million Potentially Affected, Free Credit Monitoring Offered thecyberexpress.com - The updated notice by Change Healthcare regarding the February 2024 cyberattack reveals that preliminary reviews are nearing completion but additional affected individuals may still be identified. Add...
Show more

HIPAA Violation

Jun 24, 2024

Initial Report

Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew theregister.com - In February, ransomware criminals used stolen credentials to access Change Healthcare's Citrix-based management portal, which lacked multi-factor authentication, and exfiltrated sensitive data includi...
Show more

Jun 21, 2024

Follow up

Change Healthcare lists the medical data stolen in ransomware attack bleepingcomputer.com - UnitedHealth confirmed that the Change Healthcare ransomware attack, conducted by the BlackCat (ALPHV) gang in February, led to the theft of 6 TB of sensitive data, including health insurance and medi...
Show more

Follow up

Organization Details

Organization Size

14000

HQ Location

Nashville, Tennessee

Industry

Healthcare

Security Stack used by Change Healthcare at time of breach (best approximation) Why?

Network Security

VPN/SASE

IDS/IPS

Endpoint Security

EDR

MDM

Identity Management

SSO / MFA

IGA

Application Security

WAF

SCA

Cloud Security

CASB

CWPP

SIEM / Threat Intel

SIEM

TIP

Not right? Contribute more accurate data

What is Change Healthcare?

Change Healthcare is a provider of revenue and payment cycle management that connects payers, providers, and patients within the U.S. healthcare system. The name also refers to a company founded in 2007 which subsequently became part of the current conglomerate.

Learn more about recent incidents

9 / 10

Okta Oct, 2023