PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

UnitedHealth Rebuilds Halted Services Following Ransomware Attack

UnitedHealth has restored pharmacy services and is working to fix 'infected code' in its systems. It aims to bring its claims network back online later this month.

 & Kate Irwin Reporter

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
(Credit: NurPhoto / Getty Images)

Last month, a cyberattack from the ALPHV ransomware gang crippled UnitedHealth's services, causing its subsidiary Change Healthcare to disconnect more than 100 of its systems. Now, the company is slowly starting to bring these systems back online.

Pharmacy claims and payments were brought back Thursday, and electronic payments will resume late next week on March 15, The Wall Street Journal reports. UnitedHealth will start testing its medical claims systems again on March 18, and then begin to slowly bring back the rest of its services afterward.

"It’s a combination of doing some development and what I would call rebuilding from safe environments, and some situations where we are remediating and decontaminating the infected code," UnitedHealth President and COO Dirk McMahon told the outlet.

McMahon said that some current workarounds exist, and encouraged providers to use them while UnitedHealth tries to make its systems faster.

While the attack inevitably impacts patients who urgently need medical care, it also impacts healthcare providers' financial situations. UnitedHealth's Optum subsidiary is offering "last resort" loans as well as other types of temporary funding to tide providers over until all its issues can be resolved.

Earlier this week, reports swirled that UnitedHealth may have paid a $22 million bitcoin ransom to ALPHV, also known as Blackcat, after the ransomware group swiped 4TB (4,000 GB) of Change Healthcare data. McMahon declined to comment on the issue in an interview with the Journal.

"We’re working closely with law enforcement, and this is an ongoing investigation," McMahon said.

About Our Expert

Kate Irwin

Kate Irwin

Reporter

I’m a reporter for PCMag covering tech news early in the morning. Prior to joining PCMag, I was a producer and reporter at Decrypt and launched its gaming vertical, GG. I have previously written for Input, Game Rant, Dot Esports, and other places, covering a range of gaming, tech, crypto, and entertainment news.

I’ve been a PC gamer since The Sims (yes, the original) in the CD-ROM days. I still think about my first-gen pink iPod mini, which, looking back, was not so mini. In 2020, I finally built my own custom Windows PC for gaming with a 3090 graphics card, but I also regularly use Mac and iOS devices. As a reporter, I’m passionate about documenting the wide world of tech and how it affects our daily lives.

My Areas of Expertise

  • Microsoft
  • Google
  • Artificial intelligence 
  • Cybersecurity
  • Video games are a big one. I specialize in shooters (Apex Legends, Fortnite, Overwatch) but I occasionally test out other genres as well, especially indie games or cozy games (The Sims series, Animal Crossing). 
  • The business and tech that powers video games
  • Cryptocurrency and blockchain technology
  • Social media platforms, including Meta’s apps, X/Twitter, Telegram, TikTok, etc.
  • Tech regulation

The Technology I Use

  • MSI gaming laptops
  • Nvidia graphics cards
  • AMD CPUs
  • MacBook Pro and Air laptops
  • An iPhone from 2019 (though I’m thinking about getting a “dumb phone” like the Light Phone)
  • Nintendo Switch
  • PlayStation 5
  • Freewrite Traveler 
  • At home: Sonos speakers (we have them all over the house), Philips Hue + Ring security products

Read full bio