The U.S. State Department announced an offer of up to $10 million for information leading to the identification or location of key ALPHV/Blackcat ransomware leaders. It also listed a separate reward of up to $5 million for information leading to the arrest or conviction of people involved in the group’s activity. The archived notice is dated February 15, 2024, and says it is not updated, so it does not establish whether either offer remains available today.
What is the $10 million reward for?
The State Department’s February 15, 2024 notice offers up to $10 million for information leading to the identification or location of key leaders of ALPHV/Blackcat. A second offer provides up to $5 million for information leading to the arrest and/or conviction of people conspiring to participate in, or attempting to participate in, ALPHV/Blackcat activity. These are maximum amounts, not guaranteed payments; the notice describes rewards tied to qualifying information and outcomes.
As an Amazon Associate I earn from qualifying purchases.
| Reward threshold | What information must lead to | Maximum amount |
|---|---|---|
| Key leadership | Identification or location of key ALPHV/Blackcat leaders | Up to $10 million |
| Other participants | Arrest and/or conviction of people conspiring to participate in, or attempting to participate in, ALPHV/Blackcat activity | Up to $5 million |
The State Department notice is archived and explicitly warns that archived content is not updated. It verifies the announced terms and date, not present-day availability. Check the current official Rewards for Justice notice before relying on the offer or submitting information.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Is the reward specifically for the Change Healthcare hackers?
No. The State Department’s offer concerns ALPHV/Blackcat leaders and people participating in the group’s activity; it is not described as a bounty exclusively for solving the Change Healthcare incident. The breach is associated with Blackcat in public coverage, but the reward’s stated scope is broader.
#1 Best Overall
There is also a separate U.S. reward of up to $10 million for information leading to the identification or location of North Korean hacker Rim Jong Hyok. The Justice Department described that offer in a July 25, 2024 release about alleged ransomware attacks targeting U.S. hospitals and health care providers. It is unrelated to the ALPHV/Blackcat reward and to the Change Healthcare-specific terms. DOJ’s release distinguishes that case.
How can someone submit information?
The archived State Department notice directs people to submit tips through a Tor-based channel. It says people outside the United States may contact the nearest U.S. embassy or consulate, while people in the United States may contact a local FBI office. The notice states that identities are kept strictly confidential and that U.S. government officials and employees are not eligible for the reward.
Because the notice is archived, confirm the available reporting route and offer status on an official government page before acting. The Justice Department’s Blackcat release also points people with information about Blackcat, its affiliates, or their activities toward the State Department reward channel. Read the DOJ release.
Free tools Windows power users keep installed
One-click scans. No signup required.
What is ALPHV/Blackcat?
The Justice Department describes Blackcat as a ransomware-as-a-service operation. Its developers create and update ransomware and maintain illicit infrastructure; affiliates use those tools to find and attack victims. The developers and affiliates share ransom proceeds.
Rank #3
Blackcat attacks may use multiple extortion: affiliates can steal data before encrypting systems, then demand payment both to restore access and to prevent the stolen data from being published. DOJ described this as a tactic used by Blackcat actors generally. It does not establish the precise initial-access method used in the Change Healthcare intrusion.
How many people were affected by the Change Healthcare breach?
HHS’s Office for Civil Rights says Change Healthcare reported approximately 192.7 million individuals impacted in an update dated July 31, 2025. That is the company’s reported impact figure recorded by HHS; it does not mean every person experienced identity theft, fraud, or another particular form of harm. HHS says the company initially filed a breach report on July 19, 2024, listing approximately 500 individuals while it continued determining the total. HHS’s incident FAQ provides the dated updates and explains breach-notification responsibilities.
HHS says covered entities remain responsible for ensuring required notices are provided, although they may delegate the task to a business associate. The FAQ addresses responsibilities for regulated entities; it should not be read as a general statement that every affected individual must take the same steps.
What effects did the incident have on health services?
In reporting published February 22, 2024, The Associated Press described difficulties for health systems with insurance-coverage eligibility checks, pharmacy prescriptions, claims, and cash flow during the early period of the incident. These were reported effects, not evidence that every provider or patient experienced each disruption. AP quoted health-sector officials describing how the impact was still emerging at the time. Read the AP report.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
