UnitedHealth says wide swath of patient files may have been taken in Change cyberattack

UnitedHealth said files with personal information that could cover a “substantial portion of people in America” may have been taken in the cyberattack earlier this year on its Change Healthcare business.

The company said Monday after markets closed it sees no signs that doctor charts or full medical histories were released after the attack. But it may take several months of analysis before UnitedHealth can identify people who were affected.

UnitedHealth said some screenshots containing protected health information or personally identifiable information were posted online on the dark web, which standard browsers can’t access.

The company is still monitoring the internet and dark web and said there has been no addition file publication. It has started a website to answer questions and a call center. But the company said it won’t be able to offer specifics on the effect to individual data.

The company also is offering free credit monitoring and identity theft protection for people affected by the attack.

UnitedHealth said in February that a ransomware group had gained access to some of the systems of its Change Healthcare business, which provides technology used to submit and process insurance claims.

The attack disrupted payment and claims processing around the country, stressing doctor’s offices and health care systems.