Your medical data is not as safe as you think. Discover how a massive ransomware attack exposed millions and the key steps to protect your privacy now.

The new estimate nearly doubles the company’s previous report of 100 million affected individuals, already the largest healthcare data breach ever reported to federal regulators.

UnitedHealth says that the 2024 breach of Change Healthcare impacted the data of 190 million people, up from the prior estimate of 100 million people.

UnitedHealth has revealed that 190 million Americans had their personal and healthcare data stolen in the Change Healthcare ransomware attack, nearly doubling the previously disclosed figure.

The cyberattack at UnitedHealth Group's tech unit last year affected the personal information of 190 million people, the health conglomerate said on Friday, making it the largest healthcare data breach in the United States.

A cyberattack on UnitedHealth Group Inc. that paralyzed the US health-care system last year, snarling billions of dollars in payments for doctors and hospitals, also exposed sensitive data from 190 million Americans.

The financial fallout has been severe. Profits for the company dropped by over a third in 2024, falling from around $22.3 billion in 2023 to approximately $14.4 billion last year. The projected total cost of recovery and remediation efforts is estimated to be between $2.3 billion and $2.5 billion.

The attack, originally thought to have impacted about a 100 million Americans, is even larger than originally disclosed.