Back in February 2024, Change Healthcare, owned by UnitedHealth Group, was hit with a significant ransomware attack. This attack caused widespread disruption across the US healthcare system, affecting critical systems like pharmacy services, payment platforms and medical claims processing. The attackers managed to steal a significant amount of sensitive data, including protected health information (PHI) and personally identifiable information (PII) of many individuals.1
Latest Updates
Just as Change Healthcare was beginning to recover, a second ransomware attack occurred a few weeks later for Change Healthcare, which is still working to restore all its services to full capacity. 1
Despite the second attack, Change Healthcare has made some great progress in restoring its services.
- Pharmacy services are almost back to normal, with 99% of pre-incident pharmacies able to process claims. (1)
- Medical claims are flowing at near-normal levels, and the company is working with the few remaining providers who are still experiencing issues (1)
- Payment processing is at approximately 86% of pre-incident levels and continues to improve.
Change Healthcare is taking extensive measures to support those affected by the breaches. They are offering two years of complimentary credit monitoring and identity theft protection services. They have
also set up a dedicated call center to assist with any concerns and provide necessary information. The detailed review of the stolen data is ongoing, and the company plans to notify all affected individuals once the process is complete. The situation emphasizes the essential need for strong cybersecurity measures in the healthcare sector. Change
Healthcare continues to monitor the situation and work closely with law enforcement to mitigate the impact of these attacks. They are committed to keeping stakeholders informed as they navigate through these challenges.(2)
Sources:
- UHC Press “UnitedHealth Group Updates on Change Healthcare Cyberattack,” UnitedHealth Group, 2024.
- Ross “Change Healthcare Shares Details on Medical Data Stolen during Disastrous February Cyber Attack,” IT Pro, 2024.