Change Healthcare ransomware (ALPHV/BlackCat) (CHANGE-HEALTHCARE-2024)
Ransomware · disclosed 2024-02-21 · region: US · primary attribution: MISP-e6c09b63
Sectors touched: Health Care & Social Assistance · 6324 · Credit Intermediation & Related Activities (Banking)
ALPHV/BlackCat-attributed ransomware against UnitedHealth-owned Change Healthcare, the largest US healthcare-claims clearinghouse. Caused weeks of pharmacy + provider payment outages affecting ~1/3 of US patients. UnitedHealth confirmed $872M Q1-2024 cost. Triggered AHA congressional testimony + HHS public emergency.
Named victims
- Change Healthcare
- UnitedHealth Group
- Optum
Linked sources
This canonical entry pulls together coverage from the other data layers — curated narrative above; raw sources below.
- SEC 8-K filings:
- UNITEDHEALTH GROUP INC (UNH) (CIK 0000731766) (2024-02-22)
- UNITEDHEALTH GROUP INC (UNH) (CIK 0000731766) (2024-03-08)
- UNITEDHEALTH GROUP INC (UNH) (CIK 0000731766) (2024-04-24)