Change Healthcare Ransomware Attack: One Year Later—$2.87B Impact and Industry Lessons

One year after the ALPHV/BlackCat ransomware attack on Change Healthcare disrupted prescription processing across US healthcare, UnitedHealth Group has revealed the total cost reached $2.87 billion. The attack affected 190 million Americans—the largest healthcare data breach in US history. Key lessons: the attackers entered via a Citrix account without MFA, highlighting identity security gaps in critical infrastructure. Congress has proposed mandatory cybersecurity minimums for healthcare organizations handling claims data.