Adrian Johnson
TLDR:
– Change Healthcare paid $22 million in cryptocurrency to the ransomware group AlphV behind the cyberattack
– The cybercriminal group claimed responsibility for the attack which disrupted pharmacies and hospitals
Following a ransomware attack on Change Healthcare, reports indicate that the medical firm paid $22 million in cryptocurrency to the cybercriminals responsible for the attack. The group, known as AlphV and Blackcat, claimed responsibility for the attack that disrupted pharmacies and hospitals across the country.
Security researchers confirmed that a bitcoin address affiliated with the cybercriminal group received 350 bitcoins, which amount to approximately $22 million. The ransom payment was verified by blockchain analysis company TRM Labs and further validated by posts on cybercriminal underground forums.
Last month’s cyberattack on Change Healthcare resulted in delays in the delivery of prescription drugs and affected various health-care facilities and offices. The group claimed to have exfiltrated 6 TB of data in the attack, causing disruption in claim processing and payment receipt for some health-care providers.
UnitedHealth, the parent company of Change Healthcare, stated that they are focused on investigation and restoring operations but did not confirm the alleged bitcoin payment to the cybercriminal group. More than 90 percent of U.S.-based pharmacies reportedly use modified electronic claim processing to lessen the impact of the cybersecurity issue caused by the attack.
