While the identities of the wallet owners remain undisclosed, blockchain analysis firm TRM Labs has linked the destination of the funds to "AlphV," also known as Blackcat. This connection suggests that the address used to collect the ransom payment from UnitedHealth may be affiliated with the ransomware gang. When questioned about the ransom payment, UnitedHealth stated that its focus was on the ongoing investigation and recovery efforts. On the other hand, Blackcat has not responded to inquiries from Reuters, and efforts to contact the purported partner hacker group or access the cybercrime forum where the post originated have been unsuccessful. The cyberattack on UnitedHealth's Change Healthcare unit has caused widespread disruption across the United States, with repercussions felt throughout the medical system. Despite Blackcat's claim of stealing sensitive records during the hack, the gang swiftly deleted its post without providing further explanation.