UnitedHealth Group has confirmed patient data, potentially covering a significant portion of the U.S. population, was compromised in the Change Healthcare cyberattack.
The Feb. 21 attack has prevented many dentists from sending electronic claims and attachments to insurance companies to receive payment. Change Healthcare, owned by UnitedHealth Group, is one of the largest health care technology companies in the U.S.
Twenty-two screenshots, allegedly of files obtained by the attackers, were posted for about a week on the dark web, according to an April 22 news release from UnitedHealth. Some images included protected health information and personally identifiable information. The company has not found evidence the accessed files included doctors’ charts or full medical histories.
The U.S. Department of Health and Human Services Office for Civil Rights published a webpage April 19 to share answers to frequently asked questions concerning Health Insurance Portability and Accountability Act rules and the cybersecurity attack.
Source: UnitedHealth confirms patient data compromised in Change Healthcare cyberattack / ADA News