I generally do not think it is wise to pay out ransomeware payments but in this case I do not blame Change for doing so. The data involved could severely hurt

I generally do not think it is wise to pay out ransomeware payments but in this case I do not blame Change for doing so. The data involved could severely hurt millions of people if released and not having that data was actively hurting people - potentially putting their lives and health in danger by delaying access to medical care and prescriptions. (Full disclosure: I am an employee of a competitor to Change Healthcare)