This article has been reviewed according to Science X's editorial process and policies. Editors have highlighted the following attributes while ensuring the content's credibility:


reputable news agency


Notorious ransomware group launched cyberattack on UnitedHealth Group

Credit: CC0 Public Domain

A ransomware group known as Blackcat was responsible for launching a cyberattack last week at UnitedHealth Group that resulted in nationwide disruption of prescription orders, Reuters reported Feb. 26.

Blackcat actors employ a multiple extortion model of attack, the Justice Department says, with affiliated stealing and seeking a ransom in exchange for decrypting the victim's system and not publishing stolen data.

UnitedHealth Group disclosed the cyberattack Thurdsay, saying a nation-state associated cybersecurity threat actor had accessed some at its Change Healthcare business in Tennessee. Reuters on Monday, citing unnamed sources familiar with the matter, pegged the attack to Blackcat.

UnitedHealth Group said it proactively isolated the impacted systems from other connecting systems, but pharmacies across the country have reported disruptions, as a result.

Pharmacies use the Change Healthcare systems to confirm for prescriptions, including cost-sharing amounts owed by patients. Pharmacies say they are using back-up systems to make sure patients still can receive needed medications.

In a Monday morning message to system users, Change Healthcare said the problem has not yet been resolved.

"We are working on multiple approaches to restore the impacted environment and will not take any shortcuts or take any additional risk as we bring our systems back online...," the company said. "The disruption is expected to last at least through the day."

Blackcat is one of the most notorious of the internet's many ransomware gangsā€”groups of cybercriminals who encrypt data to hold it hostage with the aim of securing massive cryptocurrency payouts. It has previous struck major businesses including MGM Resorts International and Caesars Entertainment, Reuters said.

2024 StarTribune. Distributed by Tribune Content Agency, LLC

Citation: Notorious ransomware group launched cyberattack on UnitedHealth Group (2024, February 27) retrieved 19 April 2024 from
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.

Explore further

Casino giant Caesars Entertainment reports cyberattack; MGM Resorts says some systems still down


Feedback to editors