The Change Healthcare data breach affected a significant number of users, exposing personal information that can be used for identity theft, phishing, and fraud. If you've ever had an account or relationship with Change Healthcare, it's worth checking whether your data was involved.
What Happened
Change Healthcare, a subsidiary of UnitedHealth Group that processes a huge share of US medical claims and billing, was hit by a ransomware attack from a group linked to ALPHV/BlackCat in February 2024. The attack disrupted pharmacy and billing systems across the US healthcare system for weeks. UnitedHealth confirmed it paid a ransom, reported at around $22 million, though stolen data was still leaked.
What Data Was Exposed
The breach reportedly exposed health insurance information, medical records, billing and claims data, Social Security numbers, and other personal information for an estimated 100 to 190 million individuals — making it one of the largest healthcare data breaches in US history.
Why This Still Matters
Even breaches from years ago remain a risk today. Stolen data is sold, traded, and reused indefinitely. Credentials from old breaches fuel credential stuffing attacks — automated attempts to reuse your email and password combination on other sites. If you reused a password anywhere, one old breach can compromise several current accounts.
How to Check If You Were Affected
Use our free breach checker below — enter your email and we'll scan it against known breach databases instantly, no signup required.
What to Do If You Were Affected
- Change any reused password immediately, starting with your most sensitive accounts.
- Enable two-factor authentication wherever it's offered.
- Monitor financial accounts closely if payment or banking data was involved.
- Watch for phishing — breach data is often used to craft convincing scam messages.
- Freeze your credit if your SSN or government ID number was exposed.
👉 Check your own exposure in 30 seconds → scan your email free.
Frequently Asked Questions
When did the Change Healthcare data breach happen?
The ransomware attack began around 21 February 2024. UnitedHealth Group confirmed the incident publicly that same week, and disruption to pharmacy and billing systems continued for weeks afterward.
What data was stolen in the Change Healthcare breach?
Health insurance details, medical records, claims and billing information, Social Security numbers, and other personal data were exposed for an estimated 100 to 190 million individuals, making it one of the largest healthcare breaches on record.
Did UnitedHealth pay the ransom in the Change Healthcare attack?
Yes, UnitedHealth Group confirmed paying a ransom reported to be approximately $22 million to the attackers, though a portion of the stolen data was still leaked by a second extortion group.
How do I check if I was affected by the Change Healthcare breach?
Because Change Healthcare processes claims for a huge share of US healthcare providers and insurers, many people were affected even without directly interacting with the company. UnitedHealth set up a dedicated website and call center for notifications; you can also check your email at Scan My Shadow.
What should I do if my health data was exposed?
Monitor your health insurance statements (Explanation of Benefits) for services you did not receive, freeze your credit given the SSN exposure, and consider the free credit monitoring and identity protection services UnitedHealth offered to affected individuals.