\n
![\""Checklist](\"https:\/\/www.securemac.com\/wp-content\/uploads\/2025\/03\/post-img-2-1.jpg\")
\t\t<\/span><\/p>\nChange Healthcare Data Breach Affects 190 Million, Nearly Twice Initial Estimates<\/h2>\n
The number of people affected by the Change Healthcare data breach<\/a> has surged to 190 million, nearly double the 100 million previously reported, according to UnitedHealth Group. The breach<\/a>, initially disclosed in early 2024, exposed sensitive personal and health information, making it one of the largest healthcare-related cyberattacks in U.S. history.<\/p>\n In April 2024, UnitedHealth initially estimated that hackers had accessed data on a \u201csubstantial proportion of people in America,\u201d<\/em> with early speculation suggesting as many as 170 million individuals could be affected. By October, the company revised the estimate to 100 million, only for a January 2025 update to push the number to 190 million.<\/p>\n Despite these shifts, a UnitedHealth spokesperson stated that the \u201cvast majority\u201d<\/em> of affected individuals have been notified, though final numbers are still pending confirmation with the Office for Civil Rights.<\/p>\n According to TechCrunch<\/a>, attackers exploited a stolen account credential that lacked multi-factor authentication to gain access to Change Healthcare\u2019s systems. The breach compromised a vast range of sensitive data, including:<\/p>\n UnitedHealth maintains that there is no evidence of misuse of the stolen data, though critics question the company\u2019s cybersecurity preparedness.<\/p>\n Further controversy surrounds UnitedHealth\u2019s handling of public disclosures. A TechCrunch<\/a> investigation found that Change Healthcare had embedded \u201cnoindex\u201d<\/em> code in its breach notification webpage, preventing it from appearing in search engine results. This code had reportedly been in place since at least November 2024, making it harder for individuals to find critical information.<\/p>\n UnitedHealth did not comment on why the page was hidden, but it has since stated that it had \u201csubstantially completed\u201d <\/em>the notification process. However, some affected individuals\u2014particularly those without updated addresses on file\u2014may not have received direct notice.<\/p>\n Change Healthcare had initially provided a website, ChangeCyberSupport.com<\/a>, and a helpline (866-262-5342) for those seeking more information. However, questions remain about how many affected individuals were successfully reached.<\/p>\n As the final numbers are still being confirmed, this breach remains one of the most significant cybersecurity failures in the healthcare sector. Regulators and affected individuals are now awaiting further accountability from UnitedHealth and Change Healthcare.<\/p>\n Apple<\/a> has rolled out a sweeping set of security updates, addressing 240 vulnerabilities<\/a> across all of its major operating systems, including macOS, iOS, iPadOS, watchOS, tvOS, and visionOS. Older macOS versions also received a Safari update with additional patches.<\/p>\n Apple\u2019s latest security patches include:<\/p>\n Among the updates, six security patches stand out due to active exploitation concerns. Apple\u2019s security notes indicate a CoreMedia vulnerability<\/a> that \u201cmay have been actively exploited against versions of iOS before iOS 17.2.\u201d The issue impacts iOS, iPadOS, macOS, watchOS, tvOS, and visionOS, reinforcing how Apple\u2019s software ecosystems share core components.<\/p>\n Interestingly, while newer versions were patched, macOS Sonoma, Ventura, and iPadOS 17.7.4 did not receive the fix\u2014raising questions about whether they were ever vulnerable. SecureMac CTO Israel Torres explained that changes in Apple\u2019s code structure over time may have inadvertently fixed and then reintroduced the vulnerability, depending on how different OS versions evolved. However, without deeper internal knowledge of Apple\u2019s security architecture, the exact reason remains uncertain.<\/p>\n Even without the actively exploited CoreMedia vulnerability, Apple\u2019s 234 other security fixes<\/a> highlight the importance of staying up to date. Both Apple and security experts at SecureMac strongly recommend updating all Apple devices to the latest available software versions.<\/p>\nA Timeline of Changing Numbers<\/h3>\n
How the Attack Happened<\/h3>\n
\n
Did UnitedHealth Try to Hide the Breach Notice?<\/h3>\n
Resources for Affected Individuals<\/h3>\n
Apple Releases 240 Security Fixes, Including Patches for Actively Exploited Vulnerability<\/h2>\n
Breaking Down the Updates<\/h3>\n
\n
A Critical CoreMedia Vulnerability<\/h3>\n
Time to Update<\/h3>\n