The UnitedHealth 2024 breach is worse than thought. It has now impacted 190 million Americans:
The hack at Change Healthcare affected the personal information of 100 million people, the U.S. health department had posted on its website in October.
The final number will be confirmed and filed with the U.S. Department of Health and Human Services’ office for civil rights at a later date, the company said in an emailed statement.
Ouch.
Rebecca Moody, Head of Data Research at Comparitech, has the following comment:
“This breach on Change Healthcare was already the biggest-known ransomware breach to date even before the figure increased from 100 million to 190 million, according to our data. But this latest figure puts it way ahead of second-place MOVEit which saw nearly 96M records breached (at least) in its exploit in 2023.”
“In 2024, we tracked 236 confirmed ransomware attacks on companies operating within the healthcare sector across the globe (this includes those offering direct care, e.g. hospitals, as well as companies like Change Healthcare who offer services/products within the industry). These attacks breached 231,664,818 individual records, making it a record-breaking year for the number of records breached within any industry. We also noted an average ransom demand of $7.4 million across these attacks.”
“This high volume of data breached in ransomware attacks on healthcare companies highlights hackers’ continued double-extortion attempts (encrypting systems and holding data to ransom). And due to the high volumes of sensitive data on offer at these companies, we’ll likely see a continued focus on healthcare companies throughout 2025.”
This is very bad. And I have a feeling that it’s going to get even worse than this. Buckle up your seatbelts because this is going to be a bumpy ride.

Issues With Fitbit Devices Costs The Company A Measly $12 Million
Posted in Commentary with tags Fitbit on January 27, 2025 by itnerdYou might recall that Fitbit had a bunch of devices that burned people a few years ago which forced a recall. Fast forward to today and those devices have cost Fitbit…. Wait for it….. $12 million:
Google-owned Fitbit has agreed to pay a $12.25 million civil penalty for failing to alert consumers that its Ionic smartwatches could overheat and cause burns, federal regulators said Thursday.
In addition to the $12.25 million civil penalty, the settlement agreement requires Fitbit to maintain internal controls and procedures designed to ensure compliance with the Consumer Product Safety Act (CPSA), including enhancements made to its compliance program.
You know, that’s not a whole lot of money given that Fitbit is owned by Google and Google has more cash than some countries. This fine is pretty much a rounding error for them and won’t serve as any sort of deterrent as far as I am concerned. But then again, some punishment is better than nothing.
Leave a comment »