Data Breach Notifications Underway

(June 25, 2024) Providers and insurers doing business with Change Healthcare have begun receiving notifications on whether the data related to their patients, residents, or insureds was compromised in the cyberattack that the company experienced in February. The U.S. Department of Health and Human Services (HHS) clarified last month that providers could delegate the requirement of notifying affected patients to Change Healthcare. The company will provide patients with a link to a website to help them with any questions. While investigations performed by Change found no evidence of full medical histories being exposed, the compromised data likely includes individuals’ contact and health insurance information, billing claims, and possibly Social Security Numbers.

Contact: Darius Kirstein, dkirstein@leadingageny.org, 518-867-8841