A closed laptop on a cart in an empty hospital corridor

The Change Healthcare Estimate Moved to About 190 Million People

HHS updated the record again in January 2025. The clearinghouse number got larger. The laptop on a nurse's kitchen table did not get safer by itself.

The HHS FAQ on Change Healthcare now records a January 24, 2025 update: Change Healthcare notified OCR that approximately 130 million individual notices had been sent, and that approximately 190 million individuals had been impacted. That is the figure to use if you are speaking after that date and before the later July 2025 revision.

A jump from the October notice count to a 190 million impact estimate is not a rounding error. It is a reminder that early breach numbers are provisional. Boards that locked a single number into a slide in the fall of 2024 were already out of date by February.

Do not let the big number hide the small device

Incident energy flows to the largest headline. That is reasonable. It is also how a lost laptop waits three weeks for a decision. The patient whose data was in the clearinghouse can also be the patient whose discharge summary was open on a laptop stolen from a car. Those are separate notifications, separate clocks, and separate controls.

DriveStrike is the control Spearstone ships for the device: wipe the drives you enrolled, lock the machine, and locate it from the device page. Pair that with the vendor questions your privacy officer is already asking about Change Healthcare. One does not retire the other. The January update is discussed alongside the October notice count so teams do not mix the two sentences.

Update the briefing, then update the device list

  • Replace "about 100 million notices" with the January 24 wording if your memo is dated after that notice.
  • Keep a sentence that says the estimate can move again. It did.
  • Name the person who can approve a remote wipe after hours.

Start a DriveStrike trial for the endpoints you own, and talk to Spearstone if you want the operational side designed with the privacy side.

Keep reading

Questions worth answering directly

What did HHS record for January 24, 2025?

That Change Healthcare notified OCR of approximately 130 million individual notices sent and approximately 190 million individuals impacted.

Is 190 million the final number?

No. A later notice in July 2025 put the estimate at about 192.7 million. Cite the update that matches your date.

Sources