Change Healthcare Data Breach Settlement Guide (2026)

By Timo Bakker · July 6, 2026 · 5 min read

The Change Healthcare (UnitedHealth Group subsidiary) data breach in early 2024 was one of the largest healthcare data breaches in US history, affecting approximately 100 million patient records — roughly one-third of the US population.

What data was exposed

• Names, addresses, dates of birth, phone numbers.
• Social Security Numbers for many affected individuals.
• Medical records: diagnoses, prescriptions, treatment history.
• Insurance / billing information.
• Some financial account details.

Am I eligible?

If you have been treated by any healthcare provider that uses UnitedHealth Group services, you were likely affected. This includes patients of most major US health systems. The class definition is expected to cover approximately 100 million people.

Expected payouts

• No-proof tier: $50-100 flat (typical for healthcare breach).
• Documented losses: Up to $25,000 for actual identity theft losses.
• Credit + identity monitoring: 2-3 years free (regardless of monetary claim).

Current status

Multiple class actions have been filed and consolidated in multi-district litigation. Settlement negotiations are ongoing. Estimated preliminary approval: late 2026 to early 2027. Check the live directory for the current stage.

What to do now

1. Sign up for identity monitoring (Change Healthcare offered free monitoring — enroll if you have not).
2. Check your credit reports for suspicious activity.
3. Watch for the settlement notice when it arrives (via mail or email).
4. File your claim as soon as the claim period opens.