Iowa Attorney General Files Lawsuit Against Change Healthcare Over 2024 Data Breach

Iowa Attorney General Brenna Bird filed a lawsuit against Change Healthcare on March 31, 2026, alleging violations of state consumer protection and data security laws related to a 2024 data breach. The breach exposed sensitive personal and medical information of nearly 2.2 million Iowa residents. The lawsuit claims the incident caused widespread harm but does not specify technical details or vulnerabilities exploited. No CVE IDs or specific attack vectors were mentioned in the filing. The legal action targets Change Healthcare’s alleged failure to safeguard affected data under state regulations.