Hackers Broke Into Change Healthcare’s Systems Days Before Cyberattack

Hackers Broke Into Change Healthcare’s Systems Days Before Cyberattack
UnitedHealth Group paid ransom to hackers, person familiar with the cyber investigation says
By James Rundle
Updated April 22, 2024 7:40 pm ET|WSJ PRO

Share

Resize

Listen

(2 min)



UnitedHealth’s Change processes around 15 billion transactions a year, and touches one in three medical records. PHOTO: PATRICK SISON/ASSOCIATED PRESS
The hackers who attacked UnitedHealth Group’s Change Healthcare unit were in the company’s networks for more than a week before they launched a ransomware strike that has crippled vital parts of the U.S. healthcare system since February.

The attackers, who represented themselves as the ALPHV ransomware gang or one of its affiliates, gained entry into Change’s network on Feb. 12, a person familiar with the cyber investigation said. They used compromised credentials on an application that allows staff to remotely access systems, the person said.