Change Healthcare reports massive data breach affecting 192.7 million individuals
Change Healthcare, a major business associate serving the healthcare industry, filed a report with HHS OCR regarding a hacking/IT incident. The filing, submitted on July 19, 2024, indicates that the personal information of 192.7 million individuals was compromised. The breach occurred on a network server. Because Change Healthcare acts as a business associate, this incident likely impacts the many covered entities—hospitals, clinics, and health plans—that rely on its services. Administrators should verify if their organization uses Change Healthcare and review any communications regarding patient notification or remediation steps. This is a submission date, not necessarily the date the breach occurred.
Sources differ:
- The HHS OCR breach portal lists 192,700,000 individuals with a 07/19/2024 submission date. CyberInsider reports that the original July 2024 filing gave a placeholder of 500, that the 192.7 million figure was added later, and that the total may include duplicate individuals.
Primary source: HHS OCR Breach Portal — Change Healthcare, Inc. (MN) · reported 07/19/2024 · 192,700,000 individuals · Checked against the record 2026-10-18