Imagine a company has a huge problem but tries to keep it quiet. That’s what happened with Change Healthcare last year. A cyberattack hit them, stealing health data from over 100 million people – the largest medical data theft in U. S. history. Instead of shouting about it, they hid the notice from search engines for months.

The attack happened in February 2024, causing chaos in the healthcare system. Change Healthcare paid the hackers to get back the stolen data and notify those affected. But they added special code to their notice page to tell search engines to ignore it. Weird, huh?

Change Healthcare claims they informed everyone with a postal address on file. However, they admitted they might not have all addresses. The hidden notice page was meant to inform customers and individuals about the cyberattack. But why hide it from search engines? No one knows.

Four months passed before they started notifying people. Some states, like California and Nebraska, warned residents about potential identity theft and fraud. Nebraska even sued Change Healthcare for security failings.

The big question remains: why hide the notice? And how many people really knew about it? These questions are still unanswered.

Change Healthcare's Secretive Data Breach Alert: What's the Story?

Actions