What should I do after getting the Change Healthcare data breach notice?

Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.

Is the Change Healthcare data breach letter legit or a scam?

A notice from Change Healthcare in the mail matches the breach Change Healthcare reported to the Delaware Attorney General on April 18, 2025. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Change Healthcare through a phone number or website you find yourself.

Did Change Healthcare offer free credit monitoring?

Check your letter from Change Healthcare. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Signing up doesn't waive any legal rights you may have.

Can I sue Change Healthcare over the data breach?

It depends on what was exposed, the law in Delaware and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.

Is there a Change Healthcare data breach class action lawsuit?

Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Change Healthcare. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.

How much could a Change Healthcare data breach settlement or claim be worth?

There is no set amount, and no Change Healthcare settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. Keep receipts and records; they're what damages claims are built on.

Do I need a Change Healthcare data breach lawyer or attorney?

An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.

Received a Change Healthcare (DE Update from 2024 Notice) notification letter? Read the letter guide

Investigation OpenDelaware AG filing · April 18, 2025

Change Healthcare Reports 2024 Data Breach to Delaware AG

Change Healthcare, a major healthcare technology company, officially reported a data security incident to the Delaware Attorney General on April 18, 2025. This breach, which occurred in February 2024, involved unauthorized access to systems containing personal information. Individuals who received a notification letter from the company should understand their data may have been exposed.

State: Delaware
Breach date: February 21, 2024
Reported: April 18, 2025

Change Healthcare, a significant technology provider for the U.S. healthcare system, recently confirmed a data security incident. The company officially reported this breach to the Delaware Attorney General on April 18, 2025, providing public notice of the event.

This security incident, identified as occurring on February 21, 2024, involved unauthorized parties gaining access to Change Healthcare's systems. While the investigation into the full scope of the breach is ongoing, it has been confirmed that personal information was contained within the compromised systems.

The specific types of personal information involved in this incident have not been detailed in the public filings from Change Healthcare. The company's notification indicates that data stored in their systems at the time of the incident was affected.

If you received a data breach notification letter directly from Change Healthcare, it signifies that your personal information was among the data potentially compromised. These letters are sent to inform affected individuals directly of the exposure.

As a general precaution, it is advisable to closely monitor your financial accounts and credit reports for any unusual or suspicious activity. Remain vigilant against unsolicited communications, particularly those that request personal details. Regularly reviewing account statements and considering placing a fraud alert or security freeze on your credit files are widely recommended steps to help protect your information.

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

What to know about the Change Healthcare data breach

What should I do after getting the Change Healthcare data breach notice?: Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Is the Change Healthcare data breach letter legit or a scam?: A notice from Change Healthcare in the mail matches the breach Change Healthcare reported to the Delaware Attorney General on April 18, 2025. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Change Healthcare through a phone number or website you find yourself.
Did Change Healthcare offer free credit monitoring?: Check your letter from Change Healthcare. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Signing up doesn't waive any legal rights you may have.
Can I sue Change Healthcare over the data breach?: It depends on what was exposed, the law in Delaware and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
Is there a Change Healthcare data breach class action lawsuit?: Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Change Healthcare. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
How much could a Change Healthcare data breach settlement or claim be worth?: There is no set amount, and no Change Healthcare settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. Keep receipts and records; they're what damages claims are built on.
Do I need a Change Healthcare data breach lawyer or attorney?: An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.

Related data breach cases

Browse all Delaware data breaches View the full case directory