Free tools Windows power users keep installed
One-click scans. No signup required.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
UnitedHealth’s April 2024 warning was preliminary, but the later breach estimate was much larger and more specific: Change Healthcare reported to the U.S. Department of Health and Human Services (HHS) on January 24, 2025, that approximately 190 million individuals were impacted. It also reported sending approximately 130 million individual notices.
The figure is an approximate company-reported estimate—not a federal audit or proof that every person had the same information exposed. The incident could affect people who never held UnitedHealthcare insurance because Change Healthcare processes claims and other transactions for providers, pharmacies, insurers, employers and health plans across the U.S.
What happened in the Change Healthcare attack?
On February 21, 2024, UnitedHealth Group said a suspected cyber threat actor had gained access to some Change Healthcare information-technology systems. The company isolated affected systems while investigating and restoring operations. UnitedHealth’s SEC filing described the initial incident.
Recommended Free Tools
This was more than an ordinary website or customer-account breach. Change Healthcare is a healthcare-services and claims-processing intermediary. Its systems connect medical providers, pharmacies, insurers and other organizations, allowing healthcare claims, eligibility checks, payments and related administrative transactions to move between them.
#1 Best Overall
- SHIELD YOUR PRIVACY WITH THE ID DEFENDER ROLLER STAMP: Tired of worrying about your personal information falling into the wrong hands? The ID Defender Roller Stamp offers a simple yet effective solution. With a unique wide camouflage pattern, it quickly and easily conceals sensitive data on a variety of surfaces.
- PRIVACY PROTECTION: useful not only as an ADDRESS BLOCKER or ID POLICE, but also keeps away preying eyes from invoices, authority documents, checks, bank statements and many more.
- SIMPLE TO USE: Just remove the cover and swipe. The wide swipe makes it easy to cover sensitive information.
- VERSATILE APPLICATION: Ideal for a variety of documents, including contracts, court documents, shipping labels, tax returns and more.
- LONG-LASTING INK: The high-quality ink works on both glossy and standard paper and provides up to 330 feet of coverage.
The attack caused widespread operational problems, including disrupted claims submission and payment processing, pharmacy transactions, eligibility verification and prior authorization workflows. CMS said the disruption affected pharmacies, hospitals, physician offices and patients’ ability to obtain prescriptions or care. CMS guidance documents those effects.
Operational disruption and privacy exposure are related but separate questions. Someone could experience delayed claims or prescriptions without being included in the later breach estimate, while someone else could have information in an affected file without noticing any service interruption.
What did UnitedHealth mean by “a substantial proportion”?
On April 22, 2024, UnitedHealth said its preliminary review had found files containing protected health information (PHI) or personally identifiable information (PII) that “could cover a substantial proportion of people in America.”
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThat statement did not mean the company had completed a list of affected individuals. UnitedHealth said:
Rank #2
- Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
- Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
- Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
- Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
- How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
- the review was still under way;
- it could take several months to identify people whose information was involved;
- the company had not yet determined exactly whose data appeared in the files; and
- the announcement was not an official breach notification.
The warning should therefore be understood as an early indication of potentially broad exposure—not as a final percentage or confirmed population count. UnitedHealth’s April 22 SEC filing contains the original qualification.
How many people were affected?
Change Healthcare later reported the more concrete figure to HHS: approximately 190 million individuals impacted, with approximately 130 million individual notices sent, as of its January 24, 2025 update. HHS includes those figures in its Change Healthcare cybersecurity incident FAQ.
“Approximately 190 million” should not be treated as a precise census of unique people independently verified by the government. It is a company-reported estimate. Depending on the company’s review and matching methods, records may have been duplicated or overlapped. The number also does not mean that every person had a Social Security number, diagnosis, prescription history or complete medical record exposed.
As of the latest official HHS material identified for this article, approximately 190 million is the key reported figure. HHS investigations, enforcement activity or litigation may continue, so later official updates could revise the picture.
Rank #3
- The id defender roller is the ultimate tool for guarding your personal data at home or in the office. Prevent identity theft by quickly masking sensitive information on mail, documents, or labels, giving you confidence that your details remain private and secure with Vantamo id theft protection.
- Effortlessly block out sensitive text with the label cover up identity protection, designed for quick, one-handed use. No more scraping off all shipping labels or doing a lot of swipes with a marker! Even first-time users will find the process intuitive and straightforward, making it a practical label eraser roller for anyone!
- Vantamo wide rolling privacy marker is fully refillable and arrives with 6 ink refill for self inking stamps ensuring lasting performance. Don't run out when you need it the most. The ink is specially designed for hiding information.
- Our address blackout stamp not only protects your privacy but also helps the environment. After using the roller on your documents, the paper is ready to be safely recycled, making this address eraser a smart alternative to shredding or tossing documents.
- Here at Vantamo, we are creating products that people love! We are committed to providing excellent customer service on every black out stamp. If you ever have questions or concerns, our team is here to help, ensuring your id defender delivers reliable protection and peace of mind every time.
Why people outside UnitedHealthcare may be affected
UnitedHealthcare membership is not the test for exposure. A person could be included because a doctor, hospital, pharmacy, insurer, employer health plan or another healthcare organization used Change Healthcare.
Healthcare intermediaries routinely handle information belonging to patients who may never know which technology company processed a claim or pharmacy transaction. That is why the potential reach extended well beyond people who directly interacted with Change Healthcare or carried a UnitedHealthcare policy.
What information may have been exposed?
Change Healthcare’s substitute notice says potentially affected information may include categories such as:
- names and contact details;
- dates of birth;
- health insurance and claims information;
- diagnoses and other health information;
- medication information;
- medical images and test results;
- billing information; and
- other sensitive identity or financial information, depending on the record.
The exact combination varied by individual. “Potentially impacted” does not mean every category was present for every person, nor does it establish that all affected information was publicly posted or misused. The company’s official HIPAA substitute notice explains the possible information involved and available remedies.
Rank #4
- Personal Information Protection: there are 4 pieces of address blocker roller stamps in 2 different sizes, and 5 pieces of 1.5 ml inks, a total of 9 pieces. Mainly applied to hide information such as social security numbers, bank statements, billing addresses, shipping addresses, tax documents and so on, protecting your personal information
- Re Inking Unlimitedly: the information blocker stamp can cover information of the length about 100 meters. And each security stamper roller has an oil hole, so you don't have to worry about you having to throw away the roller stamps when the ink runs out. They can be refilled with oil for repeated use, saving time and energy
- Cover Fast: our identity protection rollers come in 2 different sizes, and you can choose different sizes according to different areas of information to cover large amounts of private information in a fast and clean way, avoiding identity theft and rejecting privacy disclosure harassment
- Easy to Use: just remove the lid on the ID stamp blocker roller and open it, and then gently slide it on the place where the information needs to be covered. It is suitable for most ordinary paper with black words, and can protect your personal privacy in time
- Save Time and Energy: compared with the shredder, the personal confidential stamp has a small size, easy to carry, can be applied anytime and anywhere. Compared to the marker, it covers a larger area and can be quickly covered with a single swipe. There is no need to worry about whether you can not protect your privacy in time
Was data actually stolen?
UnitedHealth initially described a criminal cyberattack and said files containing PHI or PII might have been involved. Change Healthcare subsequently reported the incident to HHS as a breach of protected health information.
Those developments support describing the event as a confirmed PHI breach, but they do not support saying that every affected person’s entire medical record was stolen, published or misused. The relevant risks depend on what information was in the particular records and whether criminals acquired, copied, disclosed or attempted to use it.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to tell whether you were affected
Some people may receive a letter or email from Change Healthcare. Others may receive notice from a health plan, provider, pharmacy, employer health plan or another organization connected to the affected records. Change Healthcare also published a substitute notice because it could not necessarily contact every individual directly.
No notice is not conclusive proof that you were unaffected. Contact information may have been unavailable, incomplete or outdated, and the company’s identification process may not have linked every potentially affected record to a current address.
Best Value
- Personal Information Protection: there are 4 pieces of address blocker roller stamps in 2 different sizes, and 5 pieces of 1.5 ml inks, a total of 9 pieces. Mainly applied to hide information such as social security numbers, bank statements, billing addresses, shipping addresses, tax documents and so on, protecting your personal information
- Re Inking Unlimitedly: the information blocker stamp can cover information of the length about 100 meters. And each security stamper roller has an oil hole, so you don't have to worry about you having to throw away the roller stamps when the ink runs out. They can be refilled with oil for repeated use, saving time and energy
- Cover Fast: our identity protection rollers come in 2 different sizes, and you can choose different sizes according to different areas of information to cover large amounts of private information in a fast and clean way, avoiding identity theft and rejecting privacy disclosure harassment
- Easy to Use: just remove the lid on the ID stamp blocker roller and open it, and then gently slide it on the place where the information needs to be covered. It is suitable for most ordinary paper with black words, and can protect your personal privacy in time
- Save Time and Energy: compared with the shredder, the personal confidential stamp has a small size, easy to carry, can be applied anytime and anywhere. Compared to the marker, it covers a larger area and can be quickly covered with a single swipe. There is no need to worry about whether you can not protect your privacy in time
For questions, use contact details from an authentic notice or the official Change Healthcare notice page. Do not rely on a phone number or link supplied by an unsolicited caller, text message or email.
What consumers should do now
If you received a notice
- Verify the notice. Confirm that it identifies Change Healthcare or a healthcare organization involved in the incident. Navigate independently to the official Change Healthcare notice page rather than clicking suspicious links.
- Use the free offer first. If the notice says you are eligible, enroll in Change Healthcare’s two years of complimentary credit monitoring and identity-theft protection. Do not pay a third party simply to check eligibility.
- Review health records and bills. Check explanations of benefits, medical bills, prescriptions and claims for services you did not receive.
- Report unfamiliar activity. Contact the health plan or healthcare provider shown on the statement. Ask the provider to investigate and correct inaccurate diagnoses, treatments or prescriptions in your record.
- Protect your credit when appropriate. If the notice indicates that Social Security numbers, driver’s-license information or other identity data may be involved, consider a fraud alert or security freeze with the credit bureaus.
If you did not receive a notice
- Monitor explanations of benefits, insurance claims, medical records and pharmacy activity.
- Review your credit reports for unfamiliar accounts or inquiries.
- Ask your insurer, provider or employer health plan whether it has information about the incident.
- Use the official Change Healthcare support channel for questions, rather than responding to unsolicited outreach.
Credit monitoring is not medical-identity protection
Credit monitoring can alert you to some activity appearing in credit files, such as a new account or inquiry. It may not detect fraudulent medical claims, prescriptions, treatment records or an altered diagnosis. A credit freeze can make it harder for criminals to open new credit accounts, but it does not prevent someone from using medical information in a healthcare system.
That is why affected consumers should review both financial and healthcare records. A small unfamiliar claim can still signal medical identity theft, insurance fraud or an error that could affect future care.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesWhat government agencies did
HHS’s Office for Civil Rights opened investigations into Change Healthcare and UnitedHealth Group. The investigations examine whether a PHI breach occurred and whether the companies complied with HIPAA requirements. HHS also issued guidance addressing the incident’s HIPAA and operational consequences. HHS guidance provides additional context.
Those investigations are separate from consumer notification and remediation. System restoration does not by itself answer which records were exposed, whether every person was notified or whether all legal and regulatory questions have been resolved.
The key takeaway
The April 2024 “substantial proportion” warning was preliminary. The later official breach reporting put the estimated impact at approximately 190 million individuals, making this a potential concern for patients across the healthcare system—not only UnitedHealthcare members.
Whether or not you received a notice, check your health-insurance statements, medical records, pharmacy activity and credit reports. If you were notified, verify the notice and claim the complimentary monitoring service if eligible. Treat medical-record review as a separate step: credit monitoring alone cannot reveal every form of healthcare-related identity theft.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
