In February, Change Healthcare/Optum experienced a ransomware attack leading to significant financial and operational disruptions across the U.S. healthcare industry. The Centers for Medicare and Medicaid Services (CMS) initiated the Accelerated and Advance Payment (AAP) Program (CHOPD) to mitigate cash flow problems for affected Medicare providers and suppliers. Over $2.55 billion in accelerated payments were distributed to Part A providers, and more than $717.18 million in advance payments went to Part B suppliers. Recovery efforts by CMS have been effective, with over 96 percent of CHOPD payments recouped and normal Medicare billing resumed.
TPRM report: https://www.rankiteo.com/company/change-healthcare
"id": "cha002040125",
"linkid": "change-healthcare",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"
{'affected_entities': [{'industry': 'Healthcare',
'location': 'U.S.',
'name': 'Change Healthcare/Optum',
'type': 'Healthcare Industry'}],
'date_detected': 'February',
'description': 'In February, Change Healthcare/Optum experienced a ransomware '
'attack leading to significant financial and operational '
'disruptions across the U.S. healthcare industry. The Centers '
'for Medicare and Medicaid Services (CMS) initiated the '
'Accelerated and Advance Payment (AAP) Program (CHOPD) to '
'mitigate cash flow problems for affected Medicare providers '
'and suppliers. Over $2.55 billion in accelerated payments '
'were distributed to Part A providers, and more than $717.18 '
'million in advance payments went to Part B suppliers. '
'Recovery efforts by CMS have been effective, with over 96 '
'percent of CHOPD payments recouped and normal Medicare '
'billing resumed.',
'impact': {'operational_impact': 'Significant financial and operational '
'disruptions'},
'response': {'recovery_measures': 'CMS initiated the Accelerated and Advance '
'Payment (AAP) Program (CHOPD) to mitigate '
'cash flow problems'},
'title': 'Change Healthcare/Optum Ransomware Attack',
'type': 'Ransomware Attack'}