CHANGE HEALTHCARE FINALLY ADMITS IT PAID RANSOMWARE HACKERS—AND STILL FACES A PATIENT DATA LEAK

Summary from the TLDR InfoSec newsletter

More than two months after a devastating ransomware attack, healthcare firm Change Healthcare finally confirmed paying a ransom. The payment of around $22 million in Bitcoin on March 1st was previously identified by researchers but unacknowledged by Change Healthcare. However, the company now warns that a "substantial proportion" of Americans' sensitive medical data may still have been stolen despite the ransom payment.