Change Healthcare Ransomware Exposes Data for 190 Million People

Change Healthcare, an Optum company based in Minnesota, officially reported a data breach resulting from a ransomware attack that occurred on February 21, 2024. The filing detailing this incident was made public with the Minnesota Attorney General on January 8, 2026.

Investigations into the attack revealed that the exposed data included Social Security numbers, medical records, insurance information, and billing records. This extensive compromise is estimated to impact approximately 190 million individuals, representing a significant event for those whose personal information was involved.

According to the official disclosures, the investigation into the full scope and impact of the ransomware incident is ongoing. These details are based on the public filings submitted by Change Healthcare to regulatory authorities, providing a documented account of the breach.

Individuals who believe they may be affected by this data exposure should take steps to safeguard their personal information. It is advisable to regularly review financial statements and credit reports for any suspicious activity and to carefully examine Explanation of Benefits (EOB) statements from their insurance providers for unfamiliar services or charges. Additionally, consider implementing strong, unique passwords and multi-factor authentication for online accounts.