The personal health data of "a substantial proportion of people in America" might have been among the compromised files, the company said, and it confirmed it paid at least one ransom related to the attack. In a letter dated April 25 to UnitedHealth Chief Executive Andrew Witty, the AGs said providers and facilities have been unable to reach UnitedHealth for assistance in bringing their payment processes back online. Hospitals and others are contacting UnitedHealth and Change Healthcare for information about what data has been breached and which vulnerabilities in the processing systems have been patched.