Security News > 2024 > March > Change Healthcare attack latest: ALPHV bags $22M in Bitcoin amid affiliate drama

ALPHV/BlackCat, the gang behind the Change Healthcare cyberattack, has received more than $22 million in Bitcoin in what might be a ransomware payment.

Dmitry Smilyanets, an intelligence analyst at infosec outfit Recorded Future, spotted a Bitcoin wallet believed to be linked to ALPHV received 350 Bitcoins, right now worth at least $22 million, in a single transaction on March 1.

Change Healthcare provides IT services to more than 70,000 American pharmacies and hospitals, which use the supplier's technologies to process insurance claims and complete prescription orders, among other things.

The affiliates claim to still have 4TB of "Critical data" nabbed from Change and its partners, including Medicare and Tricare, CVS-CareMark, Health Net, Metlife, and Teachers Health Trust.

We should also note that this is a drop from the original 6TB the miscreants claimed to have exfiltrated from the compromised Change Healthcare IT environment.

While it's probably too soon for the Change Healthcare folks, we hope someone out there appreciates the irony in this.

News URL

https://go.theregister.com/feed/www.theregister.com/2024/03/04/alphv_ransom_payment/