Is Change Healthcare a real company?

Editorial team Published on

Change Healthcare is a real, major company that operates as a critical healthcare technology and payment-clearinghouse subsidiary of UnitedHealth Group.

Key facts about the company:

  • Core Function: It acts as a middleman in the U.S. healthcare system, routing insurance verifications, prior authorizations, medical claims, and pharmacy prescriptions between doctors, hospitals, and health insurers.
  • Scale: It processes billions of medical and pharmacy claims each year—impacting a massive share of patient records and transactions nationwide.
  • Ownership: Originally known as Emdeon, it was acquired in 2022 by Optum, a health services division owned by UnitedHealth Group.
  • Major Cyberattack: The company gained widespread public attention in February 2024 after a severe ransomware attack disrupted medical billing, insurance claims, and prescription processing across the United States.

Note: While Change Healthcare is a legitimate business, scammers frequently use its name or reference the 2024 data breach to trick people into giving away personal or financial information.

Is Change Healthcare legitimate?

Change Healthcare is a legitimate, large-scale healthcare technology and payment processing company owned by UnitedHealth Group.

What Change Healthcare Does

  • Acts as a clearinghouse that routes medical claims, eligibility checks, and prior authorizations between doctors, pharmacies, and insurance companies.
  • Processes billions of medical claims annually, accounting for a major portion of the U.S. healthcare administrative network.

The Data Breach and Scams

  • Real Breach: The company experienced a massive, legitimate cyberattack and data breach in February 2024 that exposed sensitive personal and health information for millions of Americans.
  • Legitimate Letters: If you received an official notification letter in the mail regarding this breach, it is real. Change Healthcare has been offering affected individuals two years of free credit monitoring and identity theft protection.
  • Impostor Scams: Because the breach is well-known, scammers often send fake text messages, emails, or make unsolicited phone calls pretending to be Change Healthcare.

How to Protect Yourself

  • Do not click links or call numbers provided in unsolicited texts or emails.
  • Verify any communication by going directly to your insurance provider's official website or calling the customer service number printed on the back of your insurance card.
  • Monitor your credit reports and bank statements for unusual activity.

What insurance companies use Change Healthcare?

Change Healthcare is used as a clearinghouse and technology platform by most major national and regional health insurance companies in the United States.

Major Insurers Using Change Healthcare

  • UnitedHealthcare: Uses the platform for claims processing and electronic data interchange (EDI) (note that UnitedHealth Group actually owns Change Healthcare through its subsidiary Optum).
  • Aetna (CVS Health): Uses it for real-time eligibility verification and claims management.
  • Cigna: Uses the network for payment integrity and transaction processing.
  • Blue Cross Blue Shield: Various regional BCBS plans use the system for provider connectivity and data analytics.
  • Humana: Utilizes tools on the network for revenue cycle management.
  • Molina Healthcare: Connects through the clearinghouse for payer and patient data management.

Other Network Users

  • Government Programs: State-specific Medicaid and Medicare Advantage plans.
  • Regional & Third-Party Administrators (TPAs): Hundreds of smaller administrative services, independent practice associations (IPAs), and private benefit plans.

What kind of company is Change Healthcare?

Change Healthcare is a massive healthcare technology and payment processing company in the United States. It operates as a vital clearinghouse that connects doctors, hospitals, pharmacies, and health insurance companies.

Core Functions

  • Claims Processing: It handles billions of medical and pharmacy claims every year. It processes roughly 40% of all medical claims in the U.S.
  • Revenue Cycle Management: It provides software and tools that help healthcare providers manage billing, check patient eligibility, and collect payments.
  • Data and Network Solutions: It facilitates the secure exchange of clinical and financial data across different healthcare systems.

Ownership

  • Subsidiary of UnitedHealth Group: Optum, a major health services division under UnitedHealth Group, acquired the company in 2022 for $13 billion.
  • Scale: Because of its central role in medical billing, a major cyberattack on its systems in 2024 severely disrupted payment and prescription operations for healthcare providers nationwide.

Is the Change Healthcare data breach real?

Yes, the Change Healthcare data breach is completely real and is considered the largest healthcare data breach in U.S. history.

What Happened

  • The Attack: On February 21, 2024, a ransomware attack hit Change Healthcare, a major healthcare technology and claims-processing subsidiary of UnitedHealth Group.
  • The Scope: Federal regulators and company updates indicate the incident potentially exposed the sensitive personal, medical, or financial data of roughly 192.7 million individuals—about two-thirds of the U.S. population.
  • The Fallout: The cyberattack paralyzed nationwide prescription and claims-processing networks for weeks, forcing many doctors and pharmacies to rely on manual workarounds. UnitedHealth Group reportedly paid a $22 million ransom, and federal investigations by the U.S. Department of Health and Human Services (HHS) were launched.

Protecting Yourself

Because a major event like this attracts fraudsters, scammers may send fake breach notification letters or phishing messages.

  • Do not call phone numbers or click links found inside suspicious notification letters or emails.
  • Check if you were affected by visiting official resources like the Change Healthcare Support Site or calling their official support line at 1-866-262-5342.
  • You can also monitor your credit or place a security freeze through major credit bureaus like Equifax, Experian, or TransUnion.

Change Healthcare cyberattack was due to a lack of multifactor authentication, UnitedHealth CEO says

9 related questions found

Is there a class action lawsuit against Change Healthcare?

Yes, multiple class action lawsuits have been filed against Change Healthcare and its parent company, UnitedHealth Group, following the massive February 2024 ransomware cyberattack.

Current Status of the Lawsuits

  • Consolidated Litigation: Dozens of federal class-action lawsuits brought by patients and healthcare providers have been centralized into a multidistrict litigation (MDL No. 3108) in the United States District Court for the District of Minnesota.
  • No Settlement Yet: As of late 2026, no global settlement has been reached, no class has been officially certified, and no official claim forms exist.
  • Claims: The lawsuits accuse Change Healthcare and UnitedHealth of negligence, inadequate data security, and failing to protect sensitive protected health information (PHI) and personally identifiable information (PII).

You can track updates and learn more about the Change Healthcare Data Breach Lawsuit as the legal proceedings move forward.

Is Change Healthcare owned by UnitedHealthcare?

Yes, Change Healthcare is owned by UnitedHealth Group, the parent company of UnitedHealthcare.

Ownership Details

  • Parent Company: Change Healthcare operates as a subsidiary of UnitedHealth Group following a $13 billion acquisition that closed on October 3, 2022.
  • Corporate Structure: Change Healthcare was integrated into Optum, which is the health services and data analytics arm of UnitedHealth Group (making them corporate siblings/affiliates under the same parent organization as UnitedHealthcare).
  • Market Impact: Most users on Reddit agree that this common parent ownership creates significant data and operational overlaps across the insurance and clearinghouse sectors.

What is Change Healthcare called now?

Change Healthcare still operates under the name Change Healthcare, but it is now a wholly-owned subsidiary of Optum, which is a division of UnitedHealth Group.

What Happened to the Name?

  • Acquisition: UnitedHealth Group bought Change Healthcare in October 2022 in a $13 billion deal.
  • Integration: After the purchase, Change Healthcare was combined with OptumInsight, the data and analytics branch of Optum.
  • Branding: While the legal name and brand "Change Healthcare" are still widely used in the industry and for clearinghouse services, it functions entirely as part of Optum.

What does Change Healthcare provide?

Change Healthcare provides healthcare technology services, functioning primarily as a massive electronic clearinghouse and middleman that connects medical providers, insurance payers, and pharmacies in the U.S.

Core Services

  • Claims Clearinghouse: Electronically transmits and routes medical and pharmacy claims between healthcare providers and insurance carriers.
  • Claims Processing & Management: Reviews insurance claims, handles prior authorizations, and checks patient eligibility and medical necessity.
  • Revenue Cycle Management (RCM): Offers software and tools to help providers track patient care, optimize billing workflows, control operational costs, and accelerate cash flow.
  • Payment Processing: Manages secure provider payments, payment accuracy, and financial clearance workflows.
  • Health Information Exchange & Analytics: Exchanges mission-critical health data across disconnected clinical networks to support data-driven administrative and clinical decisions.

What happened to Change Healthcare?

Change Healthcare suffered a massive ransomware cyberattack in February 2024 that crippled national medical claims processing, caused widespread financial and care disruptions, and resulted in the largest healthcare data breach in U.S. history.

The Attack and Root Cause

  • The Incident: On February 21, 2024, the Russian-linked ransomware group ALPHV/BlackCat breached Change Healthcare, a medical clearinghouse subsidiary of UnitedHealth Group.
  • Scale: Change Healthcare handles roughly 15 billion health care transactions annually and touches one in every three patient records in the United States.
  • Vulnerability: The attackers gained entry because a critical server lacked multifactor authentication (MFA) due to legacy technology. Attackers spent nine days inside the network stealing 4 to 6 terabytes of data before locking systems.

Immediate Impact

  • System Outages: Change Healthcare took its core clearinghouse systems offline to stop the spread, halting prescription processing, eligibility checks, and medical claims submissions nationwide.
  • Financial Strain: Hospitals and doctor offices lost billions in revenue. Many providers could not submit claims or receive payments, forcing over half of surveyed practices to rely on personal funds to cover operational expenses.
  • Care Delays: Roughly 74% of hospitals reported direct impacts or delays in patient care during the peak of the crisis.

Ransom and Secondary Extortion

  • Ransom Payment: Parent company UnitedHealth Group paid a $22 million ransom in Bitcoin through its Optum subsidiary on March 1, 2024, to secure the deletion of stolen files.
  • Double Cross: The primary ALPHV/BlackCat gang cheated their own affiliate in an internal "exit scam" and shut down. The affiliate kept a copy of the data and partnered with a new group, RansomHub, launching a secondary extortion campaign that leaked sensitive patient information on the dark web.

Fallout and Final Toll

  • Data Breach Scope: Federal investigations and final reviews confirmed the incident exposed the personal and health data of 192.7 million individuals, making it the largest health data breach in U.S. history.
  • Industry Response: The American Medical Association and other groups pushed for stricter federal cybersecurity standards, independent disaster recovery mandates for clearinghouses, and less health sector consolidation. The company also faced numerous consolidated lawsuits, federal HIPAA compliance investigations, and congressional hearings.