UnitedHealth Group disclosed that nearly 190 million Americans had their data compromised following the ALPHV/BlackCat ransomware attack against Change Healthcare last February.
This new information, first posted by TechCrunch, indicates an almost twofold increase in impacted individuals from prior estimates that had already made the incident the largest healthcare breach on record.
United Health said in its updated data breach notice that the attackers exfiltrated individuals' names, birthdates, home and email addresses, Social Security numbers, and other government IDs, as well as health insurance details, diagnoses, test and imaging results, treatment plans, and banking details.
"The vast majority of those people have already been provided individual or substitute notice," said Tyler Mason, a UnitedHealth spokesperson. "The final number will be confirmed and filed with the Office for Civil Rights at a later date."
