Medical Records of 100 Million Americans Exposed in Massive Data Breach

On October 24, the US Department of Health and Human Services’ Office for Data Protection and Human Rights updated the total number of people affected by the UnitedHealth data breach to 100 million, as the first time the company officially reviews the results of the breach. The confirmation confirms the breach as the largest health data breach in American history, highlighting the significant risks that cyber security incidents pose to sensitive patient information. .

What Happened to the Health Care Exemption Reform?

As reported by TechCrunch, the breach began in February 2024 when the ALPHV/BlackCat hacking group targeted UnitedHealth’s Change Healthcare platform, a widely used payment processing system within the healthcare industry. of life. Attackers used ransomware to disrupt operations and expose large amounts of sensitive data. The compromised data included patients’ personal information, financial information and medical records.

The attack had a devastating effect on the US health care sector, disrupting billing, payment processing, and even delaying patient care. Health Reform is part of the health services sector, processing millions of payments each year, which means that the breach has not only affected UnitedHealth but also many hospitals, clinics and medical practices. depends on this platform.

The Greatest Health Crisis in the United States

In testimony at the May conference, UnitedHealth CEO Andrew Witty revealed that a third of Americans’ health information has been exposed. However, the latest announcement by the company has officially explained the damage, and about 100 million people are affected. This level of exposure marks the largest public health breach ever recorded in the United States.

For context, 100 million records not only affect individuals but may indirectly affect those connected through family records or donor networks. This breach highlights the serious concern for healthcare data security, as medical data contains some of the most important personal information.

Ransom Payment and BlackCat Exit Scam

After ALPHV / BlackCat managed to breach the Change Healthcare platform, UnitedHealth decided to pay a ransom of 22 million dollars to the ransom group to prevent further leaks and secure the recovery of the data stolen. Ironically, BlackCat committed what was known as “exit fraud”—it took the ransom without honoring the agreement. The attackers got away with the payment, leaving UnitedHealth and Americans’ sensitive information still at risk.

This exit scam caused conflict between BlackCat, and the member responsible for the crime broke away to form his own group, which reportedly wanted a second ransom. This development highlights the unpredictable nature of ransomware groups, whose criminal activities can lead to fragmentation, repurposing and increased risks for victims.

How Stolen Health Information Can Be Used

Imagine that a bad actor, armed with stolen healthcare data from the Change Healthcare breach, decides to target the victims of the attack. They have access to detailed information including names, dates of birth, medical records, addresses and even financial information related to insurance and payment. Using this information, an attacker can create a multi-layered strategy:

• Medical Information Theft: An attacker can use stolen personal information to file false insurance claims in the victim’s name. By pretending to be the victim, they could request expensive treatments, prescriptions or insurance coverage of the victim, racking up fraudulent charges without the victim’s knowledge. A person may only receive this when they are denied eligible medical expenses because of “multiple priors” or when they receive unexpected bills for services they did not receive.
• Phishing Scams: By knowing the victim’s history, an attacker can send personalized emails or phone calls, pretending to be a health care provider, insurance agent or pharmacy. For example, an email might say, “We noticed a problem with your last prescription—please click here to verify your insurance information.” Because the email contains real information from the victim’s medical history, it appears credible, and the victim may provide more sensitive information such as Social Security numbers or personal information. of payment without realizing it.
• Financial Fraud: By obtaining a victim’s financial information, including billing addresses and incomplete credit card or bank details, an attacker can attempt to steal the information to open new lines of credit. This can damage the victim’s credit score and leave them with bad loan or credit card charges.
• Reputational Risk and Invasion of Privacy: In some cases, medical records may contain important information about diagnosis, treatment or mental health conditions. If this information is shared or sold on the dark web, it can cause personal and reputational harm, especially if someone tries to use this information for fraud or public exposure.

What Patients Can Do to Protect Themselves

If you are a patient affected by a crime, there are steps you can take to reduce the potential harm:

• Review Financial Accounts: Always check your bank and credit card statements for suspicious charges. Setting up alerts for unusual activity can help quickly identify unauthorized transactions.
• Request a Credit Limitation or Fraud Alert: A credit freeze may prevent new accounts from being opened in your name. A fraud alert encourages creditors to take extra steps to verify if someone tries to use your information.
• Beware of Medical Fraud: Review the insurance statement and Explanation of Benefits forms for unusual services. Report any unknown services to your insurance provider to prevent fraudulent claims or misuse of your medical benefits.
• Be careful with Personal Information: After a crime, be wary of unsolicited calls or emails that ask for sensitive information, as scammers often target crime victims in an attempt to trick them.
• Consider Data Theft Protection Services: Data theft protection services monitor your data and can alert you to misuse, helping to reduce the risks from a data breach. These services often provide insurance or assistance in the event of identity theft.

For victims, understanding these potential threats is important. Being on the lookout for unusual medical bills, unexpected communications asking for additional personal information or irregularities in insurance or credit reports can help spot suspicious activity early. If something seems out of place, confirming directly with health care providers or financial institutions can prevent further risk and ensure that their information is always protected.

UnitedHealth has been contacted for comment but has not yet responded.