Supply chain ⛓ Supply Chain

Monument Health Third-Party Breach (December 2024)

📅 2024-12-01 🏢 Change Healthcare
Primary Source ↗

Incident Details

Nebraska AG’s Lawsuit Against Change Healthcare Survives Motion to Dismiss. A lawsuit filed by Nebraska Attorney General Mike Hilgers over the 2024 Change Healthcare data breach has been allowed to proceed after surviving a motion The latest news and updates from the Change Healthcare ransomware attack, outages, data theft, lawsuits, and a timeline of events related to the largest healthcare data breach of all time. The complaint was filed in the wake of the catastrophic ransomware attack and data breach that affected more than 190 million Americans, including almost 900,000 Nebraskans. The outage following the ransomware attack caused critical payment and claims processing systems to be halted for around two months, resulting in considerable financial hardship for the healthcare providers that relied on Change Healthcare’s clearinghouse services and delaying essential healthcare services for state residents. Third-party company: Change Healthcare.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Change Healthcare
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2024-12-01 Breach occurred
  2. 2025-11-17 Publicly disclosed