UnitedHealth Group Incorporated has issued an update on the cyberattack on Change Healthcare, as detailed in an amendment to their previous SEC filings. The update, released on April 22, 2024, outlines the company's ongoing data assessment and the measures being taken to support individuals potentially impacted by the breach. UnitedHealth Group has not found evidence of full medical histories or doctors' charts being exfiltrated, despite files containing protected health information (PHI) or personally identifiable information (PII) being involved. CEO Andrew Witty emphasized the company's commitment to supporting consumers and providers affected by the incident. A dedicated website and call center have been established to provide free credit monitoring, identity theft protection, and support services. While the data review is expected...Show More

UnitedHealth Group Incorporated has issued an update on the cyberattack on Change Healthcare, as detailed in an amendment to their previous SEC filings. The update, released on April 22, 2024, outlines the company's ongoing data assessment and the measures being taken to support individuals potentially impacted by the breach. UnitedHealth Group has not found evidence of full medical histories or doctors' charts being exfiltrated, despite files containing protected health information (PHI) or personally identifiable information (PII) being involved. CEO Andrew Witty emphasized the company's commitment to supporting consumers and providers affected by the incident. A dedicated website and call center have been established to provide free credit monitoring, identity theft protection, and support services. While the data review is expected to take several months, UnitedHealth Group is proactively offering support rather than waiting for the review's conclusion. The company is also actively monitoring for any data published on the internet or dark web, noting that no further publication of PHI or PII has been observed since the initial posting of 22 screenshots on the dark web. UnitedHealth Group is coordinating with law enforcement and regulators and will issue official notifications once sufficient information is available. In addition, the company has offered to handle notifications and administrative tasks on behalf of any stakeholders affected by the breach. Change Healthcare has made significant progress in restoring services, with pharmacy services and medical claims processing operating at near-normal levels, and payment processing at 86% of pre-incident levels. The company expects full restoration of other systems in the coming weeks.