UnitedHealth says that the 2024 breach of Change Healthcare impacted the data of 190 million people, up from the prior estimate of 100 million people.

The number of individuals confirmed to be affected by the data breach is almost double the company's previous estimate.

Change Healthcare now estimates that 190 million people were affected in the massive cyberattack that took down its services nearly a year ago. | Change Healthcare now estimates that 190 million people were affected in the massive cyberattack that took down its services nearly a year ago.

About 190 million Americans may have been affected by a cyberattack targeting UnitedHealth‘s subsidiary, Change Healthcare. The breach, which disrupted the company’s IT systems, resulted in the compromise of sensitive personal and medical information.

Newly released figures suggest the scale of the 2024 Change Healthcare cyberattack is far larger than initially estimated. Around 190 million individuals are thought to

The cyberattack at UnitedHealth Group's tech unit last year affected the personal information of 190 million people, the health conglomerate said on Friday, making it the largest healthcare data breach in the United States.

The new estimate nearly doubles the company’s previous report of 100 million affected individuals, already the largest healthcare data breach ever reported to federal regulators.

The financial fallout has been severe. Profits for the company dropped by over a third in 2024, falling from around $22.3 billion in 2023 to approximately $14.4 billion last year. The projected total cost of recovery and remediation efforts is estimated to be between $2.3 billion and $2.5 billion.

The attack, originally thought to have impacted about a 100 million Americans, is even larger than originally disclosed.

The updated tally extends the scope beyond what was previously described by company Chief Executive Andrew Witty.