MINNETONKA, Minn. — *Editor's note: The above video originally aired on February 22, 2024.
UnitedHealth says files with personal information that could cover a “substantial portion of people in America” may have been taken in the cyberattack earlier this year on its Change Healthcare business.
The company said Monday after markets closed that it sees no signs that doctor charts or full medical histories were released after the attack. However, it may take several months of analysis before UnitedHealth can identify and notify people who were affected.
UnitedHealth did say that some screenshots containing protected health information or personally identifiable information were posted for about a week online on the dark web, which standard browsers can’t access.
The company is still monitoring the internet and dark web and said there has been no additional file publication. It has started a website to answer questions and a call center. The health provider is also offering free credit monitoring and identity theft protection for people impacted by the attack.
UnitedHealth said in February that a ransomware group had gained access to some of the systems of its Change Healthcare business, which provides technology used to submit and process insurance claims.
The attack disrupted payment and claims processing around the country, stressing doctor’s offices, pharmacies and healthcare systems.
Federal civil rights investigators are already looking into whether protected health information was exposed in the attack.
UnitedHealth said Monday that it was still restoring services disrupted by the attack. The provider added that it has been focused first on restoring those that affect patient access to care or medication.
The company said both pharmacy services and medical claims were back to near-normal levels. It said the payment process was back to about 86% of pre-attack levels.
UnitedHealth said last week when it reported first-quarter results that the company has provided more than $6 billion in advance funding and interest-free loans to healthcare providers affected by the attack.
UnitedHealth took an $872 million hit after fallout from the cyberattack in the first quarter, and company officials said that could grow beyond $1.5 billion for the year.
Minnetonka-based UnitedHealth Group Inc. runs one of the nation’s largest health insurers. It also operates one of the nation’s largest pharmacy benefits management businesses, provides care and offers technology services.
Company shares edged up 91 cents to $492.14 in late-morning trading Tuesday while broader indexes also climbed.
WATCH MORE ON KARE 11+
Download the free KARE 11+ app for Roku, Fire TV, Apple TV and other smart TV platforms to watch more from KARE 11 anytime! The KARE 11+ app includes live streams of all of KARE 11's newscasts. You'll also find on-demand replays of newscasts; the latest from KARE 11 Investigates, Breaking the News and the Land of 10,000 Stories; exclusive programs like Verify and HeartThreads; and Minnesota sports talk from our partners at Locked On Minnesota.
- Add KARE 11+ on Roku here or by searching for KARE 11 in the Roku Channel Store.
- Add KARE 11+ on Fire TV here or by searching for KARE 11 in the Amazon App Store.
- Learn more about the KARE 11+ app for Apple TV in the Apple App Store.
- Learn more about KARE 11+ here.