Change Healthcare

Change Healthcare experienced a ransomware attack in February that resulted in significant cash flow disruptions for Medicare providers and suppliers, including hospitals, pharmacies, and physicians. The Centers for Medicare and Medicaid Services (CMS) responded by launching the Change Healthcare/Optum Payment Disruption (CHOPD) program to provide accelerated and advance payments to affected parties. More than $3.26 billion was disbursed to ensure continued patient care. CMS has recovered the majority of these payments as providers resumed normal Medicare billing. This incident highlights the potential financial and operational impacts of ransomware on the healthcare sector.

Source: https://www.hcinnovationgroup.com/cybersecurity/data-breaches/news/55089844/cms-to-stop-program-that-addressed-medicare-funding-following-cyberattack

TPRM report: https://www.rankiteo.com/company/change-healthcare

"id": "cha003032225",
"linkid": "change-healthcare",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Change Healthcare',
                        'type': 'Company'}],
 'date_detected': 'February',
 'description': 'Change Healthcare experienced a ransomware attack in February '
                'that resulted in significant cash flow disruptions for '
                'Medicare providers and suppliers, including hospitals, '
                'pharmacies, and physicians. The Centers for Medicare and '
                'Medicaid Services (CMS) responded by launching the Change '
                'Healthcare/Optum Payment Disruption (CHOPD) program to '
                'provide accelerated and advance payments to affected parties. '
                'More than $3.26 billion was disbursed to ensure continued '
                'patient care. CMS has recovered the majority of these '
                'payments as providers resumed normal Medicare billing. This '
                'incident highlights the potential financial and operational '
                'impacts of ransomware on the healthcare sector.',
 'impact': {'operational_impact': 'Cash Flow Disruptions'},
 'lessons_learned': 'Potential financial and operational impacts of ransomware '
                    'on the healthcare sector',
 'motivation': 'Financial Disruption',
 'response': {'recovery_measures': 'CMS launched CHOPD program'},
 'title': 'Change Healthcare Ransomware Attack',
 'type': 'Ransomware Attack'}