UnitedHealth says Change Healthcare cyberattack cost it $872 million
CBSN
A cyberattack earlier this year against a UnitedHealth Group subsidiary has proved costly for one of the nation's largest employers.
The health insurance giant said in an earnings release Tuesday that it incurred $872 million in costs related to "unfavorable cyberattack effects" during the first quarter. Those unfavorable effects refer to the February 21 cyberattack on Change Healthcare, which shut down operations at hospitals and pharmacies for more than a week. The $872 million includes "the Change Healthcare business disruption impacts and exclude the cyberattack direct response costs," which likely excludes any amount UnitedHealth may have paid to hackers as a ransom.
UnitedHealth confirmed soon after the breach that the cybercriminals behind the attack was a Russia-based ransomware gang known as ALPHV or BlackCat. The group itself claimed responsibility for the attack, alleging it stole more than six terabytes of data, including "sensitive" medical records.
