UnitedHealth Tech Unit Hack Affected 192.7 Million People

A cyberattack on UnitedHealth Group’s (UNH.N) technology unit, Change Healthcare, last year affected 192.7 million people, according to the U.S. Department of Health and Human Services (HHS). The company had previously estimated the breach impacted 190 million individuals.

Disclosed in February 2024, the attack—identified as the largest healthcare data breach in U.S. history—was carried out by hackers claiming to be part of the “Blackcat” ransomware group. The breach caused widespread disruptions in claims processing and affected patients and healthcare providers nationwide.

A UnitedHealth spokesperson confirmed, “The final total number of individuals impacted by the Change Healthcare cyberattack is approximately 192.7 million,” noting that state-by-state figures may vary.

Compromised data is believed to include health insurance member IDs, patient diagnoses, treatment records, social security numbers, and provider billing codes. The breach is now listed in HHS’s official database of healthcare data breaches maintained by its Office for Civil Rights.