UnitedHealth Group first disclosed the cyberattack in February.
In May, when Witty told lawmakers the breach might have impacted data for about one-third of all U.S. residents, the U.S. population stood at about 336 million, according to the U.S. Census Bureau.
The company started sending letters to patients about the hack in July and August, saying information ranging from their health conditions to Social Security numbers may have been accessed.
UnitedHealth Group says it has repaired the impacted systems at Change Healthcare.
“We continue to work with customers to bring transaction volumes back to pre-event levels and to win new business with our now more modern, secure and capable offerings,” Chief Financial Officer John Rex said during a call with investors earlier this month. “We expect to continue to build back the business to pre-attack levels over the course of ‘25.”
The company estimated total financial impact for the company from the cyberattack, before adjusting for tax benefits, would be about $2.77 billion — up from a July estimate of up to $2.45 billion. After adjusting for tax benefits, the total financial hit could be about $2.24 billion, the company says.
