Cyb3rius
@cyb3rius
· Aug 26
How did Change Healthcare get breached and what was paid?A ransomware attack on February 21, 2024, took Change Healthcare offline, forcing UnitedHealth Group to pay a $22 million Bitcoin ransom to the ALPHV/BlackCat group.What happened: ALPHV/BlackCat breached Change Healthcare through an unsecured Citrix portal using stolen credentials, with no multi-factor authentication enabled. The outage froze prescriptions, billing, and claims nationwide for weeks. UnitedHealth confirmed the ransom payment on May 1, 2024, while
0