UnitedHealth paid ransom to bad actors, says patient data was compromised in Change Healthcare cyberattack
Summary
UnitedHealth Group on Monday said it paid ransom to cyberthreat actors to try and protect patient data, following the February cyberattack on its subsidiary Change Healthcare. "This attack was conducted by malicious threat actors, and we continue to work with the law enforcement and multiple leading cyber security firms during our investigation," UnitedHealth told CNBC in a statement. "A ransom was paid as part of the companys commitment to do all it could to protect patient data from disclosure." The company said no other data has been published, and it has not seen evidence that doctors charts or full medical histories were accessed in the breach. The company has launched a call center that will offer free identity theft protections and credit monitoring for two years, the release said.