activeMN AG filing · January 8, 2026
Change Healthcare Breach: What Your Notification Letter Means
If you got a letter from Change Healthcare, your Social Security number and medical records may have been exposed in the February 2024 ransomware attack. Here is what to do next.
- State
- MN
- Affected
- 190,000,000
- Breach date
- February 21, 2024
- Reported
- January 8, 2026
What may have been exposed
- Social Security numbers
- medical records
- insurance information
- billing records
Change Healthcare processes a large share of U.S. medical claims, so this breach reached an estimated 190 million people. The exposed data reportedly includes Social Security numbers, medical records, insurance details, and billing information. Because health and financial identifiers were involved, placing a credit freeze and monitoring your medical statements are sensible first steps. If you received a notice, keep the letter — it establishes your eligibility to participate in any settlement or claim.