2024 Change Healthcare ransomware — 100M affected
Data compromised
Social Security numbers, Credentials, Health information, Treatment information
Technical writeup
ALPHV/BlackCat ransomware attack on Change Healthcare subsidiary. Largest healthcare breach in U.S. history. Health insurance member IDs, diagnoses, treatment info, SSNs, and billing codes exposed. Widespread disruption to pharmacies and hospitals.
Root cause
Ransomware; compromised Citrix credentials without MFA.