UnitedHealth Says Ransom Was Paid in Change Healthcare Hack

UnitedHealth Group Inc. says a ransom was paid in the February cyberattack against the company that has disrupted payments throughout the US health-care system.

The ransom was paid “as part of the company’s commitment to do all it could to protect patient data from disclosure,” a company spokesperson said in an email. UnitedHealth declined to provide more details.

Two months after the attack on the company’s Change Healthcare unit came to light, the health-care system is still dealing with the repercussions. UnitedHealth said last week that the attack could reduce its earnings by as much as $1.6 billion this year, ...