Change Healthcare breach: The cyberattack’s impact 2 years later

Change Healthcare breach: The cyberattack’s impact 2 years later

February 19, 2026

Hayley DeSilva

It’s been two years since a cyberattack against Change Healthcare roiled healthcare, exposing data on 190 million consumers and demonstrating the vulnerabilities of an industry so reliant on one vendor.

The Feb. 21, 2024, attack by ransomware group BlackCat forced UnitedHealth Group, Change Healthcare’s parent company, to disable functions including claims processing, prescription management, payment, prior authorization and insurance verification. Chaos ensued as critical functions ground to a halt.

Providers and pharmacies sought workarounds, started hiring other vendors, and took out loans from UnitedHealth Group, other insurers and the federal government. To date, the financial hit to UnitedHealth Group totals more than $3.5billion.
To read full article, click here.