Change Healthcare data breach
Change Healthcare experienced a significant ransomware attack, leading to the exposure of personal and medical data for an estimated 190 million individuals. The Minnesota Attorney General is actively investigating this incident, and affected persons may be eligible for a case review.
Docket sheet
- Company
- Change Healthcare
- Venue
- Minnesota Attorney General
- Filed
- January 8, 2026
- People affected
- 190,000,000
- Status
- active
Where this breach stands
- 1
Breach occurredFebruary 21, 2024
Date of the incident as stated in the filing.
- 2
Reported to the MN Attorney GeneralJanuary 8, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: active. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Social Security numbers
- medical records
- insurance information
- billing records
Clerk's notes
Change Healthcare, a major healthcare technology company, reported a large-scale data breach originating from a ransomware attack that occurred on February 21, 2024. This security incident potentially compromised sensitive information belonging to an estimated 190 million people.
Investigations into the breach indicate that the exposed data categories include Social Security numbers, medical records, insurance information, and billing records. These types of personal details are valuable to malicious actors and can be used for identity theft or other fraudulent activities.
The Minnesota Attorney General's office is currently engaged in an active investigation concerning this breach. For individuals who have received a notification letter from Change Healthcare, understanding the full scope of the exposure and potential next steps is crucial.
It is advisable for anyone affected by the Change Healthcare breach to closely monitor their financial accounts, credit reports, and statements for any unusual activity. Reviewing credit reports regularly can help detect unauthorized accounts or suspicious transactions linked to identity theft.
If you have been notified that your data was impacted by the Change Healthcare ransomware breach, it is important to understand your options. A free case review can help clarify if your specific circumstances warrant further action.
If a notification letter about this breach reached you, see every MN data breach on file or browse all cases.
Other MN docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Quantum ReserveIdaho AG—Monitoring
- Cassia School DistrictIdaho AG—Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.