UnitedHealth has confirmed a massive cyberattack that exposed personal and health information for 190 million Americans. This is almost double the number initially reported: in October 2024, UnitedHealth reported a data breach affecting 100 million people, including an attack on its subsidiary Change Healthcare.
However, in January 2025, this figure was increased to 190 million people. The attackers gained access to personal and health information, including insurance data, medical records, payment information, addresses, phone numbers, and Social Security numbers. The hackers exploited a vulnerability in Citrix’s remote access system, where multi-factor authentication was not enabled. After penetrating the network, the attackers stole 6 TB of data, encrypted computers, and paralyzed the company’s IT systems. UnitedHealth paid a $22 million ransom to unlock the data, but the stolen data was leaked online, and the attackers demanded additional payments.
https://hackyourmom.com/en/novyny/unitedhealth-povidomyla-pro-vytik-danyh-190-miljoniv-lyudej/
