Yazılar

UnitedHealth Tech Unit Hack Affected 192.7 Million People

A cyberattack on UnitedHealth Group’s (UNH.N) technology unit, Change Healthcare, last year affected 192.7 million people, according to the U.S. Department of Health and Human Services (HHS). The company had previously estimated the breach impacted 190 million individuals.

Disclosed in February 2024, the attack—identified as the largest healthcare data breach in U.S. history—was carried out by hackers claiming to be part of the “Blackcat” ransomware group. The breach caused widespread disruptions in claims processing and affected patients and healthcare providers nationwide.

A UnitedHealth spokesperson confirmed, “The final total number of individuals impacted by the Change Healthcare cyberattack is approximately 192.7 million,” noting that state-by-state figures may vary.

Compromised data is believed to include health insurance member IDs, patient diagnoses, treatment records, social security numbers, and provider billing codes. The breach is now listed in HHS’s official database of healthcare data breaches maintained by its Office for Civil Rights.

FBI Investigating Cyberattack at Oracle Involving Patient Data Theft

The FBI is currently investigating a cyberattack at Oracle that resulted in the theft of patient data, according to a Bloomberg News report. The attack, which occurred after January 22, compromised Oracle’s servers, where hackers copied patient data to an external location. The breach is believed to have been an attempt to extort multiple medical providers in the United States.

Oracle, which acquired Cerner Corp. in 2022 for $28 billion, notified its healthcare customers about the breach earlier this month. However, it remains unclear how many patient records were affected and which healthcare providers were targeted. The breach involved older Cerner servers, where data had not yet been transferred to Oracle’s cloud storage.

While the FBI has declined to comment, Oracle confirmed it became aware of the breach on February 20. Oracle has not yet responded to further inquiries. The company’s involvement in healthcare IT through its Cerner acquisition has likely increased its exposure to cybersecurity risks in the healthcare sector.