There are backups (mostly). To be safe, they picked a restore date before the suspected initial entry date. This is a few weeks before the final attack. Chan

There are backups (mostly). To be safe, they picked a restore date before the suspected initial entry date. This is a few weeks before the final attack. Change Healthcare is sanitizing the attacked servers, then migrating data over to the new servers to avoid losing data.