The updated tally extends the scope beyond what was previously described by company Chief Executive Andrew Witty.

About 190 million Americans may have been affected by a cyberattack targeting UnitedHealth‘s subsidiary, Change Healthcare. The breach, which disrupted the company’s IT systems, resulted in the compromise of sensitive personal and medical information.

A cyberattack on UnitedHealth Group Inc. that paralyzed the US health-care system last year, snarling billions of dollars in payments for doctors and hospitals, also exposed sensitive data from 190 million Americans.

The financial fallout has been severe. Profits for the company dropped by over a third in 2024, falling from around $22.3 billion in 2023 to approximately $14.4 billion last year. The projected total cost of recovery and remediation efforts is estimated to be between $2.3 billion and $2.5 billion.

The number of individuals confirmed to be affected by the data breach is almost double the company's previous estimate.

The attack, originally thought to have impacted about a 100 million Americans, is even larger than originally disclosed.

The cyberattack at UnitedHealth Group exposed personal information of 190 million people, leading to a $22 million ransom payment in bitcoin.