Did Change Healthcare have a data breach?
Answer
Yes. Change Healthcare reported a data breach to the MN Attorney General on January 8, 2026. The filing lists about 190,000,000 people affected.
What the filing says
- Reported to
- Minnesota Attorney General
- Filing date
- January 8, 2026
- Breach date
- February 21, 2024
- People affected
- 190,000,000
- Type of incident
- Ransomware
Information involved
- Social Security numbers
- medical records
- insurance information
- billing records
In plain terms
Change Healthcare has filed official notice regarding a major ransomware incident that exposed sensitive data for approximately 190 million individuals. The breach involved Social Security numbers, medical records, insurance information, and billing records, as confirmed in public disclosures.
Change Healthcare, a leading healthcare technology company, reported a significant data breach stemming from a ransomware attack. The incident, which occurred on February 21, 2024, has been officially filed with the Minnesota Attorney General.
The breach exposed a broad range of personal and health-related data. Affected information includes Social Security numbers, medical records, insurance information, and billing records for an estimated 190 million individuals.
Such sensitive data, if misused, could lead to various risks for affected individuals. Social Security numbers are often used for identity verification, while medical and billing records contain private health and financial details.
Individuals who believe they may be impacted by this incident should consider taking steps to protect themselves. Regularly reviewing credit reports for unusual activity, monitoring financial statements, and being cautious of unsolicited communications are general recommended precautions.
This information is based on the official public filing made by Change Healthcare with the Minnesota Attorney General, providing details on the nature and scope of the data exposure.
Commonly recommended next steps
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Look up another company
Other breaches reported in MN
- Teamsters Local 17Yes — reportedIndiana
- Teamsters Local 17Yes — reportedIN
- BankYes — reportedIndiana
- BankYes — reportedIN
- Quantum ReserveYes — reportedIdaho
- Gem Prep Meridian NorthYes — reportedIdaho
- Gem Prep PocatelloYes — reportedIdaho
- American Heritage Charter SchoolYes — reportedIdaho
- Gem Prep OnlineYes — reportedIdaho
- Gem Prep Twin FallsYes — reportedIdaho
DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with Change Healthcare.