The U.S. government has launched an investigation into the cyberattack at UnitedHealth Group’s Change Healthcare to determine if there was a breach of protected Health data and if the company complied with U.S. health privacy laws, according to a report by Sriparna Roy and Patrick Wingrove of Reuters.
The Department of Health and Human Services announced the probe into the Feb. 21 cyberattack, which has caused disruptions in the healthcare sector across the United States. Patient information is safeguarded under the Health Insurance Portability and Accountability Act (HIPAA).
Change Healthcare, which processes around 50% of medical claims in the U.S. for thousands of healthcare providers, pharmacies, hospitals, and laboratories, was the target of the cyberattack. UnitedHealth Group, the parent company, has vowed to cooperate with the investigation and has emphasized the importance of restoring systems, protecting data, and supporting those affected by the incident.
According to healthcare privacy lawyer Shannon Britton Hartsfield, businesses covered by HIPAA are required to report breaches to affected individuals within 60 days of discovery. The scale of the cyberattack poses challenges in identifying and notifying individuals impacted by the breach.
The Office for Civil Rights, tasked with enforcing HIPAA regulations in the healthcare sector, is focused on determining if UnitedHealth complied with the law and the extent of the breach. Investigations into HIPAA violations are common, with the Office initiating numerous compliance reviews in recent years.
The full scope of the data breach is still unknown, and UnitedHealth has attributed the cyberattack to the “Blackcat” gang, a ransomware group known for disruptive attacks. The hackers claimed to have stolen millions of sensitive records from the company, including medical insurance and health data.
As the investigation unfolds, the healthcare industry remains on high alert, emphasizing the importance of cybersecurity measures to protect patient information and uphold privacy laws. Stay informed as this story develops.
Read More Health News
