# Change Healthcare Breach Hits 100M Americans – Krebs on Security

<https://krebsonsecurity.com/2024/10/change-healthcare-breach-hits-100m-americans/>

- Host: [krebsonsecurity.com](https://links.thingelstad.xyz/hosts/krebsonsecurity.com/)
- Saved: October 30, 2024 (2024-10-31T02:13:20Z)
- Record: https://links.thingelstad.xyz/links/0f3f55cce85f/
- JSON: https://links.thingelstad.xyz/links/0f3f55cce85f.json

## What Jamie wrote

The scope of this breach is incredible.

> In April, Change estimated the breach would affect a "substantial proportion of people in America." On Oct 22, the healthcare giant [notified](https://www.hhs.gov/hipaa/for-professionals/special-topics/change-healthcare-cybersecurity-incident-frequently-asked-questions/index.html) the **U.S. Department of Health and Human Resources** (HHS) that "approximately 100 million notices have been sent regarding this breach."
> 
> A notification letter from Change Healthcare said the breach involved the theft of:
> 
> - Health Data: Medical record #s, doctors, diagnoses, medicines, test results, images, care and treatment;  
> - Billing Records: Records including payment cards, financial and banking records;  
> - Personal Data: Social Security number; driver's license or state ID number;  
> - Insurance Data: Health plans/policies, insurance companies, member/group ID numbers, and Medicaid-Medicare-government payor ID numbers.
> 
> The _HIPAA Journal_ [reports](https://www.hipaajournal.com/change-healthcare-responding-to-cyberattack/) that in the nine months ending on September 30, 2024, Change's parent firm **United Health Group** had incurred $1.521 billion in direct breach response costs, and $2.457 billion in total cyberattack impacts.

Once this data is out there it is just out there. The only thing we can do is attempt to minimize the ability for criminals to leverage such incredibly comprehensive data.

## Facts

- Kind: [Page](https://links.thingelstad.xyz/kinds/page/)

## Appears in

- [WT299: Weekly Thing 299 / Apples, Abundance, Australia](https://weekly.thingelstad.com/archive/299/), Notable

## Same host

- [Stark Industries Solutions: An Iron Hammer in the Cloud – Krebs on Security](https://links.thingelstad.xyz/links/a7e7915b8b1e/) (krebsonsecurity.com, May 30, 2024)
- [The Global Surveillance Free-for-All in Mobile Ad Data – Krebs on Security](https://links.thingelstad.xyz/links/8fa75eda4085/) (krebsonsecurity.com, October 24, 2024)
- [An Interview With the Target & Home Depot Hacker – Krebs on Security](https://links.thingelstad.xyz/links/6e9a062534fd/) (krebsonsecurity.com, November 16, 2024)
- [Trump 2.0 Brings Cuts to Cyber, Consumer Protections – Krebs on Security](https://links.thingelstad.xyz/links/d408529bc145/) (krebsonsecurity.com, February 27, 2025)
- [Trump Revenge Tour Targets Cyber Leaders, Elections – Krebs on Security](https://links.thingelstad.xyz/links/22e4469894b0/) (krebsonsecurity.com, April 17, 2025)

## Saved the same week

- [Apple's Commitment to AI Is Clear, But Its Execution Is Uneven - MacStories](https://links.thingelstad.xyz/links/533f98875bec/) (macstories.net, October 30, 2024)
- [Meta’s AI Abundance – Stratechery by Ben Thompson](https://links.thingelstad.xyz/links/9ce077650a73/) (stratechery.com, October 30, 2024)
- [Nintendo Releases a Music App - MacStories](https://links.thingelstad.xyz/links/2eb7b37c7d5b/) (macstories.net, October 30, 2024)
- [Pokémon TCG Pocket Launches Early - MacStories](https://links.thingelstad.xyz/links/51fc0fd8c2e5/) (macstories.net, October 30, 2024)
- [Simplify and enhance Amazon S3 static website hosting with AWS Amplify Hosting](https://links.thingelstad.xyz/links/0fa2f5deb4ad/) (aws.amazon.com, October 30, 2024)

## Elsewhere

- Wayback Machine: https://web.archive.org/web/*/https://krebsonsecurity.com/2024/10/change-healthcare-breach-hits-100m-americans/