CHANGE HEALTHCARE INC.

Change Healthcare Inc. disclosed a data breach where a cybercriminal accessed its computer system without permission between February 17 and February 20, 2024. The unauthorized access was detected on February 21, 2024. The incident involved the exfiltration of protected health information (PHI), including medical records, diagnoses, and treatments, as well as personally identifiable information (PII) such as names, addresses, Social Security numbers, and financial data including payment cards and bank account numbers. Change Healthcare contained the incident by shutting down systems, engaged law enforcement and forensic investigators, and is offering two years of credit monitoring and identity theft protection to affected individuals.