UnitedHealth did not have cyber-insurance coverage at the time of the ransomware attack on its Change Healthcare subsidiary, leaving it to cover the $22m ransom paid to hackers. The attack disrupted the US’s largest healthcare payment system, causing a backlog of healthcare claims and payments. Change Healthcare’s technology infrastructure has been rebuilt, increasing server capacity and cloud reliance. As a result, UnitedHealth now spends approximately $300m per year on cybersecurity, and has also provided over $6.5bn in no-interest, no-fee loans to thousands of providers in response to the attack.
