The cyberattack on UnitedHealth Group’s subsidiary, Change Healthcare, was larger than initially estimated, impacting about 190 million individuals compared to the earlier count of 110 million victims. The company continued investigating the breach, which exposed data such as contact info, date of birth, health information, and billing details, but haven’t identified additional victims. Change Healthcare, which paid a $22 million ransom after the attack, has advised victims to enroll in credit monitoring and identity protection services, among other measures.

400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered