BreachCensus

Change Healthcare

United States of America

Change Healthcare is an organisation in Delaware. It appears on the Delaware Attorney General data security breach database with 3 confirmed incidents; the most recent notice was filed on July 31, 2025.

Data as of October 17, 2026.

Confirmed incident

US-DE

Disclosed
July 31, 2025

Timeline

  1. July 31, 2025
    Reported to regulator Regulator

    DE AG breach notification: 534,372 Delaware residents affected

    source
  2. July 31, 2025
    Reported to regulator Regulator

    DE AG breach notification: 534,372 Delaware residents affected

    source
What a Delaware notice means

Governed by 6 Del. C. §12B-102. Notice to the Attorney General is required when a breach affects more than 500 Delaware residents.

Note: the count is Delaware residents only, not a total.

Delaware breach-notification register ↗

Confirmed incident

US-DE

Disclosed
April 18, 2025

Timeline

  1. April 18, 2025
    Reported to regulator Regulator

    DE AG breach notification: 539,916 Delaware residents affected

    source
  2. April 18, 2025
    Reported to regulator Regulator

    DE AG breach notification: 539,916 Delaware residents affected

    source
  3. April 18, 2025
    Reported to regulator Regulator

    DE AG breach notification: 539,916 Delaware residents affected

    source
  4. July 31, 2025
    Reported to regulator Regulator

    DE AG breach notification: 534,372 Delaware residents affected

    source
Confirmed incident

US-DE

Occurred
February 21, 2024
Disclosed
February 21, 2024

Timeline

  1. Undated
    Reported to regulator Regulator

    DE AG breach notification: an unknown number of Delaware residents affected

    source
  2. Undated
    Reported to regulator Regulator

    DE AG breach notification: an unknown number of Delaware residents affected

    source
  3. Undated
    Reported to regulator Regulator

    DE AG breach notification: an unknown number of Delaware residents affected

    source

Litigation

  • Possible litigation — multiple candidate dockets found, not yet resolved to a single case.