The impact of the Change Healthcare ransomware-caused data breach has increased from 100 million to 190 million individuals.

The number of individuals confirmed to be affected by the data breach is almost double the company's previous estimate.

The largest healthcare data breach on record just got even bigger, after UnitedHealth Group (UHG) confirmed that 90 million additional customers were impacted by a ransomware attack on Change Healthcare last year.

UnitedHealth has revealed that 190 million Americans had their personal and healthcare data stolen in the Change Healthcare ransomware attack, nearly doubling the previously disclosed figure.

The ransomware attack on Change Healthcare affected over 100 million Americans, the health giant told regulators.

Last year's cyberattack against Change Healthcare affected nearly twice as many people as UnitedHealth Group previously reported.

About 190 million Americans may have been affected by a cyberattack targeting UnitedHealth‘s subsidiary, Change Healthcare. The breach, which disrupted the company’s IT systems, resulted in the compromise of sensitive personal and medical information.

The financial fallout has been severe. Profits for the company dropped by over a third in 2024, falling from around $22.3 billion in 2023 to approximately $14.4 billion last year. The projected total cost of recovery and remediation efforts is estimated to be between $2.3 billion and $2.5 billion.

The cyberattack at UnitedHealth Group's tech unit last year affected the personal information of 190 million people, the health conglomerate said on Friday, making it the largest healthcare data breach in the United States.

A group of 65 plaintiffs are suing UnitedHealth Group, claiming that “massive security failures” led to the 2024 Change data breach.

UnitedHealth confirms 190 million individuals affected by last year’s ransomware attack on Change Healthcare systems.