UnitedHealth Group paid a ransom to safeguard patient data

UnitedHealth Group Admits Paying Ransom to Cyberattackers to Protect Patient Data

In a shocking revelation, UnitedHealth Group has admitted to paying a ransom to the cyberattackers behind the recent breach of Change Healthcare in order to protect patient information. The company confirmed that a ransom was paid as part of its commitment to safeguard patient data from disclosure, although the exact amount was not disclosed.

The breach resulted in the compromise of files containing personal information, including personal health information and personally identifiable information. Screenshots allegedly from exfiltrated files were posted on the dark web by a malicious threat actor, but UnitedHealth Group stated that no further publication of PHI or PII has occurred at this time.

The company is currently working with external industry experts to analyze the data involved in the cyberattack and provide support and protections to potentially impacted individuals. UnitedHealth Group CEO Andrew Witty is expected to testify before a House committee in May regarding the ransomware attack.

In March, it was reported that UnitedHealth Group paid $22 million to recover access to data and systems encrypted by the Blackcat ransomware gang. Change Healthcare, owned by Optum, a subsidiary of UnitedHealth Group, discovered the cyberattack on February 21, leading to disruptions in claims payments to hospitals and physician groups nationwide.

Despite the challenges, UnitedHealth Group has made significant progress in restoring Change services and continues to work towards identifying and notifying impacted customers and individuals. The company has urged concerned individuals to visit a dedicated website or call a provided hotline for more information and support.