UnitedHealth Group on Monday said it paid a ransom to cyber threat actors to try and protect patient data, following the February cyberattack on its subsidiary Change Healthcare. The company also confirmed that files containing personal information were compromised in the breach.

No evidence suggests patients' medical histories and personal data were accessed during a February ransomware attack, UnitedHealth Group CEO Andrew Witty told the Senate Finance Committee Wednesday.

Despite paying a $22 million ransom in Bitcoin to regain access to encrypted files, the company cannot confirm whether copies of the data were made or published online.