STRIKE0 / OFFENSIVE SECURITYAUTONOMOUS RED TEAMING / HUMAN-DIRECTED
PUBLIC INCIDENT DOSSIER / 21 FEB 2024
DISRUPTION / SEC / COMPANY-FILED

Change Healthcare
Security incident.

UnitedHealth Group disclosed USD 2.2 billion of direct response costs for 2024 following the Change Healthcare cyberattack.

$2.2B
2024 DIRECT RESPONSE COSTSUSD 2.2B direct response costs and USD 867M business-disruption impacts are different reported categories, not stolen funds or a ransom. The figure here displays only the direct response cost.All incidents ↗
01 / DOCUMENTED FINDINGSPUBLIC-SOURCE ANALYSIS
WHAT HAPPENED

What the evidence shows.

Its 2024 annual report separately estimated USD 867 million in Optum Insight business-disruption impacts during the year. The filing described wide-ranging restoration, response, notification and provider-support costs.

MEASUREMENT / INTERPRETATION

What the number means.

USD 2.2B direct response costs and USD 867M business-disruption impacts are different reported categories, not stolen funds or a ransom. The figure here displays only the direct response cost.

CONTROL QUESTIONS

How to test resilience.

Business-continuity stress testing, critical third-party dependencies, identity boundaries and containment playbooks.

Read cited source ↗
02 / RELATED INCIDENTSMORE EVIDENCE
DISRUPTION / 2026

Ahold Delhaize

EUR 200-250MProjected Q4 net sales reduction ↗DISRUPTION / 2017

Maersk

$200-300MCompany-estimated financial impact ↗DISRUPTION / 2023

MGM Resorts

~$100MEstimated adjusted property EBITDAR impact ↗
TURN LESSONS INTO VALIDATION

Find the path before an attacker does.

Discuss a scoped assessment ↗