When American Healthcare Almost Failed in Nine Days

The Rise of UnitedHealth Group00:00:30

UnitedHealth grew from a 1974 startup into an industry behemoth through an aggressive strategy of acquisitions, eventually consolidating services under the Optum brand. By 2022, it became indispensable by acquiring Change Healthcare, which controlled a significant portion of U.S. insurance payment processing.

The BlackCat Cyberattack00:06:18

The hacker group BlackCat targeted Change Healthcare, exploiting a lack of multi-factor authentication to infiltrate the system for nine days. This resulted in the theft of 6 terabytes of sensitive data and the complete shutdown of insurance payment infrastructure, crippling the U.S. healthcare system.

Ransom and Systemic Chaos00:15:09

UnitedHealth faced a ransom demand of $22 million. Amidst the chaos, the company disconnected data centers, leading to nationwide service disruptions. Reports suggest a ransom was paid to regain control, but the data remained compromised, eventually resurfacing under a new group called Ransomhub.

Aftermath and Congressional Inquiry02:10:00

UnitedHealth CEO Andrew Witty faced a U.S. Congressional hearing in May 2024 to address the negligence that enabled the attack. By 2025, it was estimated that the sensitive information of 190 million Americans—nearly half the population—had been stolen, raising critical questions about security in monopolistic healthcare infrastructures.