ALPHV blamed for recent Change Healthcare cyberattack

TLDR:

• ALPHV/BlackCat ransomware gang responsible for cyberattack on Change Healthcare affecting pharmacies in the US.
• The attack has disrupted IT systems, causing delays in prescription processing for customers like CVS and Walgreens.

ALPHV/BlackCat ransomware gang is reportedly responsible for the massive Change Healthcare cyberattack that has disrupted pharmacies across the US since last week. The ransomware-as-a-service operation has been linked to the intrusion at UnitedHealth owned business, which provides IT services for medical facilities, including software for insurance coverage. The breach led to delays in prescription processing for customers like CVS and Walgreens with significant backlogs reported nationwide. UnitedHealth blamed a nation-state cyber threat actor for the network intrusion and efforts are ongoing to restore impacted environments without shortcuts.

ALPHV has been associated with other attacks on critical infrastructure targets, including the 2021 Colonial Pipeline ransomware attack. The US government has offered bounties up to $15 million for information leading to the identification or location of ALPHV leadership members. The cyberattack continues to have significant impacts on the pharmacy industry in the US, highlighting the increasing risk of cyber threats on critical healthcare systems.