RansomHub, a site on the dark web used to auction off previously stolen data or conduct new ransomware attacks, posted a notice on Sunday saying they were in possession of "over 4 TB of highly selective data" that came from the Feb. 21 attack on Change Healthcare.
