Witty has since confirmed that UnitedHealth paid the ransom to regain access to Change Healthcare's systems, in what he called "one of the hardest decisions I've ever had to make." The recovery process is underway. Starting on March 7, 2024, UnitedHealth has publicly announced and updated timelines to restore key Change Healthcare systems. Most recently, on April 22, 2024, the company stated that while UnitedHealth had identified some Protected Health Information (PHI) and Personally Identifiable Information (PII) among the data accessed in the attack, it had not seen any evidence of extraction of certain especially-sensitive materials, "such as doctors' charts or full medical histories." Additional Actions Called For Nonetheless, in the April 25 letter, the attorney general coalition, led by Minnesota Attorney General Keith Ellison, called for further action from UnitedHealth and Change Healthcare to address the fallout from the attack, characterizing their response to date as "inadequate."