Change Healthcare

The Change Healthcare data breach due to a ransomware attack has introduced significant disruptions across the healthcare sector, with UnitedHealth, the parent company, estimating potential costs to be around $1.6 billion. The breach prompted concerns about reporting responsibilities under HIPAA, with provider organizations urging the Office for Civil Rights for clarity and a declaration of sole responsibility resting with Change Healthcare for breach notifications. UnitedHealth has offered support and to undertake notification responsibilities, yet provider organizations seek OCR validation to ensure legal compliance falls on UnitedHealth Group/Change Healthcare as the affected covered entity.

Source: https://www.hcinnovationgroup.com/cybersecurity/data-breaches/news/55041183/associations-ask-ocr-for-clarity-on-change-healthcare-breach-reporting

"id": "cha002011725",
"linkid": "change-healthcare",
"type": "Breach",
"date": "5/2024",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"