Change Healthcare

In late February, Change Healthcare, a unit of UnitedHealth Group (UHG), fell victim to a cybersecurity incident, significantly impacting health care operations across the United States. The U.S. Department of Health and Human Services (HHS) has been actively coordinating with UHG to mitigate the consequences of the attack and ensure continuity of health care services. As a result of the cyberattack, numerous health care providers reported issues related to the submission of claims and receipt of payments, potentially affecting the financial flow and operational capabilities within the sector. In response, Medicare and Medicaid services have implemented measures such as encouraging electronic data interchange (EDI) enrollment changes for claims processing and relaxing prior authorization requirements. The incident underscores the vulnerability of the health care sector to such attacks and highlights the need for enhanced cybersecurity measures across the ecosystem.

Source: https://www.hhs.gov/about/news/2024/03/05/hhs-statement-regarding-the-cyberattack-on-change-healthcare.html

TPRM report: https://scoringcyber.rankiteo.com/company/changehealthcare

"id": "cha212050724",
"linkid": "changehealthcare",
"type": "Breach",
"date": "03/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'United States',
                        'name': 'Change Healthcare',
                        'type': 'Healthcare'}],
 'date_detected': 'late February',
 'description': 'Change Healthcare, a unit of UnitedHealth Group (UHG), '
                'experienced a cybersecurity incident in late February, '
                'affecting health care operations across the United States. '
                'The U.S. Department of Health and Human Services (HHS) is '
                'coordinating with UHG to mitigate the consequences and ensure '
                'continuity of health care services. The attack disrupted the '
                'submission of claims and receipt of payments, impacting the '
                'financial flow and operational capabilities within the '
                'sector. Medicare and Medicaid services have implemented '
                'measures to address the issue.',
 'impact': {'operational_impact': ['Financial flow disruption',
                                   'Operational capabilities impact'],
            'systems_affected': ['Claims submission', 'Payments receipt']},
 'lessons_learned': 'The incident underscores the vulnerability of the health '
                    'care sector to such attacks and highlights the need for '
                    'enhanced cybersecurity measures across the ecosystem.',
 'title': 'Cybersecurity Incident at Change Healthcare',
 'type': 'Cyberattack'}