UnitedHealth Group says the impact from the cyberattack last year at its Change Healthcare subsidiary is much wider than previously understood, affecting

Over half of the U.S. had private data stolen in a 2024 cyberattack at the insurance giant—far more than previous estimates.

The financial fallout has been severe. Profits for the company dropped by over a third in 2024, falling from around $22.3 billion in 2023 to approximately $14.4 billion last year. The projected total cost of recovery and remediation efforts is estimated to be between $2.3 billion and $2.5 billion.

A group of 65 plaintiffs are suing UnitedHealth Group, claiming that “massive security failures” led to the 2024 Change data breach.