Change Healthcare Inc. data breach
Change Healthcare Inc. appears in 10 breach notices filed with New Hampshire DOJ, Rhode Island AG, Delaware DOJ, Oregon DOJ, Maryland AG, SC Consumer Affairs, California AG, Washington AG and Montana DOJ, most recently reported on July 31, 2025.
Also listed as: Change Healthcare; Change Healthcare (DE Update from 2024 Notice); Change Healthcare, Inc.; Change Healthcare Inc
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| Jul 31, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Apr 22, 2025 | Rhode Island AG | Not listed | Not listed | Not listed | Notice ↗ |
| Apr 18, 2025 | Delaware DOJ | Feb 21, 2024 | Not listed | Not listed | Delaware DOJ list ↗ |
| Sep 16, 2024 | Oregon DOJ | Feb 17, 2024 – Feb 20, 2024 | Not listed | Not listed | Oregon DOJ list ↗ |
| Aug 6, 2024 | Maryland AG | Not listed | 1,300,000 Maryland residents | NameSocial Security numberDate of birthDriver's license or state IDMedical informationHealth insurance informationEmail addressAddressPhone number | Notice ↗ |
| Aug 5, 2024 | SC Consumer Affairs | Not listed | 2,688,358 South Carolina residents | Not listed | Notice ↗ |
| Aug 3, 2024 | California AG | Feb 12, 2024, Feb 22, 2024 | Not listed | Not listed | California AG list ↗ |
| Aug 3, 2024 | Washington AG | Feb 17, 2024 – Feb 20, 2024 | 3,121,209 Washington residents | NameSocial Security NumberMedical InformationDriver's License or Washington ID Card NumberFinancial & Banking InformationFull Date of BirthMilitary ID NumberPassport NumberHealth Insurance Policy or ID Number | Washington AG list ↗ |
| Aug 3, 2024 | Oregon DOJ | Feb 12, 2024 – Feb 22, 2024 | 250 Oregon residents | Not listed | Oregon DOJ list ↗ |
| Aug 2, 2024 | Montana DOJ | Feb 17, 2024 – Feb 20, 2024 | 346,718 Montana residents | Not listed | Notice ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for Change Healthcare Inc. right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.