Ransomware Attack on Change Healthcare: $22 Million Payment Raises Concerns

Published: March 12, 2024

The recent ransomware incident aimed at Change Healthcare, a medical firm, has caused substantial disruption, particularly affecting pharmacies nationwide, including those within hospitals. This disruption in prescription drug delivery has persisted for over 2 weeks. Recent developments within the criminal underground community have shed light on this incident.

An affiliate of the hackers group, AlphV or BlackCat, revealed a significant transaction, approximately $22 million, in Bitcoin. This transaction, connected to AlphV, suggests a ransom payment received for the attack on Change Healthcare. Dmitry Smilyanets, a researcher at Recorded Future, noted the rarity of such large transactions and inferred that it likely indicates ransom payment. However, Change Healthcare has declined to confirm if they made such a payment. 

Both Recorded Future and TRM Labs have linked the Bitcoin address receiving the $22 million payment to AlphV hackers. This potential payment sets a concerning precedent for the healthcare sector, as it not only fuels future attacks by the same group but also encourages other ransomware actors to target essential healthcare services. Brett Callow, a researcher at Emsisoft, emphasizes the danger of such payments, indicating they could incentivize repeated attacks on the healthcare industry.

Moreover, an affiliate of AlphV, posting as “notchy,” complained about not receiving their agreed share of the ransom, suggesting internal disputes within the hacker group. Additionally, the affiliate claimed to have accessed data from other healthcare firms associated with Change Healthcare, posing further risks of data exploitation or extortion. 

The $22 million ransom, if confirmed, marks a lucrative achievements for AlphV, similar to other notable ransom payments in the past. Despite a previous setback due to an FBI operation, AlphV managed to execute a devastating cyberattack on Change Healthcare, underscoring the resilience and adaptability of ransomware groups. The recent disappearance of AlphV’s dark web site raises questions about potential law enforcement actions or internal conflicts within the group. However, given their history of rebranding and regrouping, it’s uncertain if this marks the end of their activities. 

This incident emphasizes the alarming escalation of ransomware threats against critical infrastructure, echoing the disruptive consequences witnessed in previous high-profile attacks, like the Colonial Pipeline breach. The targeting of vital healthcare services not only jeopardizes patient care, but also sets a dangerous precedent for future cyber extortion schemes. 

Reach Out To Us

Recent Posts

Schedule a DISCOUNTED Cyber Security Risk Assessment

For a limited time, qualifying businesses can gain insight to their security risks for a discounted rate! We’ll provide a comprehensive cybersecurity assessment, complete with an analysis of vulnerabilities and backup & disaster recovery plan. This offer is good on a scan of up to 100 endpoints.

Learn More
We started using Accent Consulting for our IT needs this past year. Their professionalism and attention to details are excellent! I would recommend this company to anyone!
Dr. Loretta TaylorEvans, Taylor & Finney Eye Care
Accent's extensive preparation and planning at every step of the process, along with their willingness and ability to adapt that plan as things unfolded, greatly exceeded my expectations. Their rapid response to support inquiries is remarkable. Every question of mine was answered, or at least acknowledged, within minutes, not hours. From the earliest stages of our migration, it was clear I was working with very knowledgeable and capable people. Accent knows what they're doing.
Jason PetersonScholar Corporation
We have had a fantastic experience with Accent—the leadership, support and staff. Everyone is so kind and helpful. In addition, all are very knowledgeable in their fields. We have worked with other IT companies that made many promises about support, technical experience and assistance with projects that rarely delivered on any of it. That has not been the case with Accent. We are very pleased!
Meredith JacobsFort Wayne Radiology
With Accent, one email or call is enough to remove the burden of IT problems. The reachability and responsiveness of the staff continues to exceed expectations and the employees actually care about helping their clients. Hire Accent, they’re excellent at meeting the needs of their clients with flexible service and most definitely worth the investment.
Jackson WertTrue North Strategic Advisors
These folks did a GREAT job setting up our dedicated fiber line! Very professional and efficient. Highly recommend this company for all your IT needs! We liked them so much we decided to give them all our business in the future.
Daniel LeensvaartSummers Plumbing, Heating & Cooling
Previous
Next