Blog > Cyber Attack Against Optum’s Change Healthcare: What Our Clients Need to Know 
bpocyberattacke-alerts
February 28, 2024
Cyber Attack Against Optum’s Change Healthcare: What Our Clients Need to Know 

Cyber Attack Against Optum’s Change Healthcare: What Our Clients Need to Know 

As many of you know, Change Healthcare was the target of an apparent cyberattack this past Wednesday. The revenue cycle company, which is a subsidiary of UnitedHealth Group’s Optum, indicated that it had managed to “isolate its systems” to mitigate further harm. Optum, UnitedHealthcare, and UnitedHealth Group (UHG) systems were not affected by the attack, according to sources at UHG.

Cyber Attack Against Optum’s Change Healthcare: What Our Clients Need to Know 

Share

In a filing on Thursday with the U.S. Securities and Exchange Commission (SEC), UnitedHealth asserted that it had identified a "suspected nation-state-associated" actor behind the attack. According to a February 26 report by the Health Information Sharing and Analysis Center (Health-ISAC), UHG claimed to have contained the incident and that customers and partners would not need to disconnect from the network.

Despite these assurances, there are concerns that this latest cyberattack against an American healthcare entity may not be over and may not be limited to just one company. According to cyber intelligence firm RedSense, more health-related organizations are likely to be compromised by the same tactic used to undermine Change’s systems. “We would expect to see additional victims in the coming days,” according to the RedSense report.

While it is uncertain at this time the extent to which the breach of Change’s systems will affect downstream processes for the healthcare industry as a whole, the American Hospital Association (AHA) did release the following cautionary statement:

Due to the sector wide presence and the concentration of mission critical services provided by Optum, the reported interruption could have significant cascading and disruptive effects on revenue cycle, certain health care technologies and clinical authorizations provided by Optum across the health care sector.

We want to assure our clients that we are taking preventative measures to defend against this and other potential assaults against our mission-critical systems. Protecting patient information and other sensitive data is among our top priorities at Coronis Healthcare. We are blocking known malicious IP addresses and other tools used in this attack. Our Information Security team is also working with our Managed Detection and Response vendors to perform proactive threat hunting against our systems to check for Indicators of Compromise. We also confirmed with our Managed Service Providers that they are not running vulnerable systems associated with this attack vector.

We will continue to investigate how the cyber-attack against Optum's Change Healthcare may impact our clients. As we get more information, we will provide further updates.

Related

When the Unexpected Occurs: Another Health Plan Suffers Cyberattack

You never know what a day might bring. For the most part, Americans live in relative peace and safety; but, every now and then, the unexpected crisis occurs. In these moments, we’re often staggered and stymied due to the initial shock; but we soon realize there must be a prompt and appropriate response. It’s how we respond to such crises that often determines the extent to which the damage is limited, and it doesn’t hurt to be prepared before the crisis occurs. These principles are certainly applicable in today’s healthcare space.

See Post

Round Two: Another Cyberattack on the Healthcare Sector

When the movie Jaws premiered in June of 1975, it caused a sea-change (pun intended) in the way people thought about beach-going. Before the 25-foot great white monster chewed its way into the American consciousness, vacationers were cavalier and nonplussed about hitting the waves and swimming off the shores of Miami, Galveston or Santa Monica. But once the movie hit the theaters, it literally caused a demonstrable change in the minds of many, according to some academic studies. People thought twice about taking a dip at the beach.

See Post

Rebuilding and Restoration: UHG Makes Strides in Wake of Cyberattack

One of things that keeps life interesting is the release of new information. Americans have access to multiple cable news outlets and innumerable headline sources on the web and in print. Sometimes the information is distressing and sometimes it can be heartening. Today’s alert may be seen by many as an example of the latter.

See Post