Change Healthcare fallout persists

Change Healthcare's breach ultimately encompassed about 193 million individuals reported)), with the company later providing a refined tally of roughly 192.7 million affected in its August 7, 2025 update reported)). The intrusion has been attributed to the ALPHV/BlackCat ransomware group analyzed)), and UnitedHealth Group acknowledged paying a $22 million ransom in bitcoin during CEO Andrew Witty’s May 1, 2024 congressional testimony testified)). UnitedHealth booked $475 million in direct Change-related costs during Q3 2024 reported)), and company disclosures and industry reporting subsequently placed the total fiscal‑year impact in the neighborhood of $2.3–2.9 billion (roughly $2.87 billion in some estimates). reported)) An American Hospital Association survey of nearly 1,000 hospitals in March 2024 found 94% experienced financial impact and almost 60% reported revenue losses of $1 million or more per day survey)), while more than 90% of the nation’s roughly 70,000 pharmacies had to implement electronic or offline workarounds after the February outage reported)). More than 50 federal lawsuits were centralized into Multi‑District Litigation MDL No. 3108 in the U.S. District Court for the District of Minnesota (assigned to Judge Donovan W. Frank) for pretrial coordination docket)), and HHS’s Office for Civil Rights opened a HIPAA compliance probe and published FAQs addressing notification and investigatory steps announced)). As late as March 2026, reporting showed intermittent Change Healthcare system disruptions were still affecting physician and hospital billing and cash‑flow recovery efforts reported)), and company updates noted breach notification mailings with the incident call center scheduled to close Aug. 26, 2025 after notifications were sent reported)).