Change Healthcare

In late February, Change Healthcare, a unit of UnitedHealth Group (UHG), experienced a significant cybersecurity incident which impacted healthcare operations nationwide. The U.S. Department of Health and Human Services (HHS) has been closely coordinating with UHG to mitigate disruptions to healthcare services, including facilitating claims processing and payments. This incident has highlighted vulnerabilities within the healthcare system, affecting numerous hospitals, doctors, pharmacies, and other stakeholders. Concerns have been raised about potential cash flow issues due to the inability to submit claims and receive payments promptly. HHS has taken steps to support the healthcare community, such as allowing Medicare providers to change clearinghouses for claims processing, encouraging Medicare Advantage and Part D sponsors to relax requirements, and suggesting Medicaid and CHIP plans offer similar flexibilities. This cybersecurity incident serves as a stark reminder of the urgent need to enhance cybersecurity resilience across the healthcare ecosystem.

Source: https://www.hhs.gov/about/news/2024/03/05/hhs-statement-regarding-the-cyberattack-on-change-healthcare.html

TPRM report: https://scoringcyber.rankiteo.com/company/changehealthcare

"id": "cha211050724",
"linkid": "changehealthcare",
"type": "Cyber Attack",
"date": "12/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Nationwide',
                        'name': 'Change Healthcare',
                        'type': 'Healthcare Unit'}],
 'date_detected': 'Late February',
 'description': 'In late February, Change Healthcare, a unit of UnitedHealth '
                'Group (UHG), experienced a significant cybersecurity incident '
                'which impacted healthcare operations nationwide.',
 'impact': {'operational_impact': ['Disruptions to healthcare services',
                                   'Inability to submit claims and receive '
                                   'payments promptly'],
            'systems_affected': 'Healthcare operations'},
 'lessons_learned': ['Urgent need to enhance cybersecurity resilience across '
                     'the healthcare ecosystem'],
 'response': {'recovery_measures': ['HHS allowing Medicare providers to change '
                                    'clearinghouses for claims processing',
                                    'Encouraging Medicare Advantage and Part D '
                                    'sponsors to relax requirements',
                                    'Suggesting Medicaid and CHIP plans offer '
                                    'similar flexibilities']},
 'title': 'Change Healthcare Cybersecurity Incident',
 'type': 'Cybersecurity Incident'}