MIT Logo

Change Healthcare Finally Admits It Paid Ransomware Hackers—and Still Faces a Patient Data Leak

Abstract:

Change helath care which is a subsidiary of UnitedHealth Group which is a health insurance and service company had been targetting and hacked by two different groups. The first group of hackers known as AlphV had stolen health-related data of people all over the US. Change Health care ended up paying the ransom of 22 million which was noted on RAMP, a Russian cybercriminal forum. Even when Change Healthcare never confirmd they paid they did make a statement saying they would inorder to show its commitment to protect patient data. A second group RansomHub sent WIRED alleged stolen data samples they got from Change Healthcares network following with Change Healthcare warning abou the screenshots of data being leaked. There was arguments between teh groups about who and how much of the ransome payment would be shared between them. As well as the effects of the attack lead to a large disruption with insurance approvals for medications and procedures stopping. Overall 872 million was spent on this attack by Change Healthcare however over a billion dollars is predicted to be the cost of this attack. The precident set by this attack is worrying other helath care industries since Change helathcer paid it hsows jsut how sensitive and profitable health care data is.

Author:
ANDY GREENBERG
Domain:
Dimension: ,
Region:
Data Type: ,
Keywords:
MIT Political Science
MIT Political Science
ECIR
GSS