UnitedHealth Confirms ALPHV/BlackCat Ransomware Attack on Change Healthcare

Cyberattack Disrupts U.S. Pharmacy Operations Nationwide

American healthcare giant UnitedHealth Group has officially confirmed that its subsidiary Change Healthcare suffered a ransomware attack by the notorious ALPHV/BlackCat cybercrime group. The incident continues to cause widespread disruptions across U.S. pharmacies and healthcare systems.

Key Details of the Attack

  • Confirmed Threat Actor: ALPHV/BlackCat, a Russia-based ransomware gang
  • Systems Affected: Change Healthcare’s infrastructure (Optum and UnitedHealthcare systems remain unaffected)
  • Response Team: UnitedHealth is collaborating with Mandiant, Palo Alto Networks, and law enforcement
  • Potential Data Exposure: Hackers claim to have stolen sensitive health data of millions

“Our experts are working to address the matter,” said Tyler Mason, UnitedHealth VP, in an official statement. “We’re actively assessing the impact on members, patients, and customers.”

ALPHV/BlackCat’s Involvement

The cybercriminals briefly claimed responsibility on their dark web leak site before removing the post—a common tactic during ransom negotiations. UnitedHealth has not confirmed whether:

  • A ransom was paid
  • Negotiations are ongoing
  • The stolen data contains patient records

Widespread Healthcare Disruptions

Impact on Pharmacy Services

Since the February 21 attack, Change Healthcare’s systems remain largely offline, affecting:

  • Prescription processing at 67,000+ U.S. pharmacies
  • Insurance verification for hospital stays
  • Medical billing systems nationwide

Military Impact: Tricare reports global disruptions to military pharmacy services

Nebraska Case Study: Most hospitals cannot process insurance claims or provide cost estimates

About Change Healthcare

  • Processes 15 billion healthcare transactions annually (1 in 3 U.S. patient records)
  • Merged with Optum in 2022 in a $7.8 billion deal
  • Handles prescription billing for most major U.S. pharmacies

Expert Analysis

Brett Callow, Emsisoft threat analyst, warns:

“The ransomware epidemic is escalating. Without government intervention, critical services face potentially catastrophic disruptions.”

Investigation Status

  • No confirmed link between ALPHV/BlackCat and nation-state actors
  • ConnectWise confirms their systems weren’t the attack vector
  • Full system restoration timeline remains unclear

Financial Context

  • UnitedHealth reported $22 billion profit in 2023
  • CEO compensation reached $21 million last fiscal year

TechCrunch’s Carly Page contributed reporting.


For security researchers: Tips can be shared via Signal/WhatsApp (+1 646-755-8849) or SecureDrop.


📚 Featured Products & Recommendations

Discover our carefully selected products that complement this article’s topics:

🛍️ Featured Product 1: A&I Genuine Part 165146A PLATE SEPARATOR Pack of 6

A&I Genuine Part 165146A PLATE SEPARATOR Pack of 6 Image: Premium product showcase

Professional-grade a&i genuine part 165146a plate separator pack of 6 combining innovation, quality, and user-friendly design.

Key Features:

  • Industry-leading performance metrics
  • Versatile application capabilities
  • Robust build quality and materials
  • Satisfaction guarantee and warranty

🔗 View Product Details & Purchase


🛍️ Featured Product 2: A&I Genuine Part 165292C1 SPROCKET ELEVATOR

A&I Genuine Part 165292C1 SPROCKET ELEVATOR Image: Premium product showcase

Carefully crafted a&i genuine part 165292c1 sprocket elevator delivering superior performance and lasting value.

Key Features:

  • Professional-grade quality standards
  • Easy setup and intuitive use
  • Durable construction for long-term value
  • Excellent customer support included

🔗 View Product Details & Purchase


🛍️ Featured Product 3: A&I Genuine Part 1650422M1 GASKETTHERMO BODY(5 PCK)

A&I Genuine Part 1650422M1 GASKETTHERMO BODY(5 PCK) Image: Premium product showcase

Carefully crafted a&i genuine part 1650422m1 gasketthermo body(5 pck) delivering superior performance and lasting value.

Key Features:

  • Cutting-edge technology integration
  • Streamlined workflow optimization
  • Heavy-duty construction for reliability
  • Expert technical support available

🔗 View Product Details & Purchase

💡 Need Help Choosing? Contact our expert team for personalized product recommendations!

Remaining 0% to read
All articles, information, and images displayed on this site are uploaded by registered users (some news/media content is reprinted from network cooperation media) and are for reference only. The intellectual property rights of any content uploaded or published by users through this site belong to the users or the original copyright owners. If we have infringed your copyright, please contact us and we will rectify it within three working days.