On February 21, 2024, Change Healthcare became aware of activity in our computer system that happened without our permission. We quickly took steps to stop that activity. We began an investigation right away and contacted law enforcement. Our security team has been working around the clock in conjunction with several top security experts to address the matter and understand what happened.
At this point, we do not know, and this is not an official notification.
UnitedHealth Group has engaged industry leading experts to assist our internal team in learning as much as we can about the data as quickly as possible.
Given the ongoing nature and complexity of the data review, it is likely to take several months of continued analysis before enough information will be available to identify and notify impacted customers and individuals. While this comprehensive data analysis is conducted, the company is in communication with law enforcement and regulators and will do appropriate notifications when we can confirm the information involved.
We have engaged leading security experts to review the data. That has to be done extremely methodically and requires a significant amount of time and resources.
Given the ongoing nature and complexity of the data review, it is likely to take several months of continued analysis before enough information will be available to make notifications.
This is not an official breach notification. When enough information is available from our ongoing and methodical data review, we will do appropriate notifications in the most efficient way possible, as required by law.
A dedicated call center has been set up to offer free credit monitoring and identity theft protections for two years to anyone impacted. The call center will also include trained clinicians to provide emotional support services. Given the ongoing and complexity of the data review, the call center will not be able to provide any details on people’s impacted data at this time.
The call center can be reached at 1-866-262-5342.
While we are still investigating whether your personal information may have been affected, there are some things you can do to protect yourself:
If you believe you are the victim of a crime, you can contact your local law enforcement authorities and file a police report.
To order your free annual credit report, visit www.annualcreditreport.com, call toll-free at 877-322-8228, or complete the Annual Credit Report Request Form on the U.S. Federal Trade Commission’s (“FTC”) website at www.ftc.gov and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. The three credit bureaus provide free annual credit reports only through their website, toll-free number or request form.
A fraud alert helps protect against the possibility of an identity thief opening new credit accounts in your name. You can place a fraud alert on your credit report by calling any one of the three credit reporting agencies' toll-free fraud numbers. The contact information for the credit reporting agencies can be found at:
A security freeze needs to be placed on your credit file at each credit bureau. To place a security freeze on your credit report, contact the credit reporting agency by phone, mail or secure electronic means and provide proper identification of your identity.
A fraud alert helps protect against the possibility of an identity thief opening new credit accounts in your name. A security freeze helps prevent potential credit grantors from accessing your credit report without your consent.