UnitedHealth, one of the nation’s largest health insurers, experienced a cyberattack on its Change Healthcare business in February 2023. The company recently announced that the attack may have compromised the personal information of a substantial portion of Americans. UnitedHealth clarified that it has not yet identified any evidence of stolen doctor’s charts or complete medical histories. However, the company acknowledged that some screenshots containing protected health information were posted on the dark web for about a week. UnitedHealth has since taken down the screenshots and is actively monitoring the internet and dark web for any additional file publications.
The company is still investigating the impact of the attack and has set up a website and call center to provide information and answer questions. However, it emphasized that it cannot currently provide specific details about the impact on individual data. UnitedHealth is offering free credit monitoring and identity theft protection to affected individuals.
The cyberattack targeted Change Healthcare’s systems, which are used to submit and process insurance claims. The incident disrupted payment and claims processing nationwide, causing significant challenges for healthcare providers and health systems. Federal civil rights investigators are currently reviewing the attack to determine if protected health information was exposed. UnitedHealth remains focused on restoring services disrupted by the attack, with priority given to those that affect patient access to care or medication. The company reported that pharmacy services and medical claims are nearly back to normal levels, while payment processing has recovered to approximately 86% of pre-attack levels.
UnitedHealth incurred an $872 million loss in the first quarter due to the cyberattack, with potential expenses exceeding $1.5 billion for the year. The company provided over $6 billion in advance funding and interest-free loans to healthcare providers impacted by the disruption. UnitedHealth’s stock price declined by nearly $3 during midday trading on Tuesday, despite broader market gains.