Skip to content
NOWCAST Pittsburgh's Action News 4 at Noon
Watch on Demand
Advertisement

UnitedHealth says wide swath of patient files may have been taken in Change cyberattack

UnitedHealth says wide swath of patient files may have been taken in Change cyberattack
EIGHT NEWS AT FIVE. A CYBER ATTACK IS DELAYING PRESCRIPTION REFILLS ACROSS THE COUNTRY, INCLUDING SOME CENTRAL IOWA PHARMACIES. KCCI IS ETHAN HUMBLE JOINS US TO EXPLAIN THE TOLL THIS IS TAKING ON LOCAL PHARMACIES. HEY, ETHAN. YES, LAURA JODI TWO DAYS CAN MAKE A LARGE DIFFERENCE WHEN IT COMES TO TAKING PRESCRIPTION DRUGS. THAT’S HOW LONG SOME LOCAL PHARMACISTS TOLD ME THEY NEEDED TO PUT A PAUSE ON GIVING OUT PILLS ENTIRELY. AND SEVERAL WEEKS LATER, THEY’RE STILL FEELING SOME OF THE EFFECTS OF THE CHANGE. HEALTH CARE CYBERATTACK. IOWA PHARMACIES HAVEN’T BEEN OPERATING AT FULL STRENGTH. IT’S VERY DISHEARTENING BECAUSE WE WANT TO DELIVER THE MEDICATIONS TO OUR PATIENTS THAT WE SERVE. IT CREATES A TREMENDOUS BACKLOG ON ON THE PHARMACIES. IT’S BECAUSE OF A FEBRUARY 21ST RANSOMWARE ATTACK ON CHANGE HEALTH CARE, A DIVISION OF UNITED HEALTH GROUP. THE ATTACK SHUT DOWN THE LARGEST HEALTH CARE PAYMENT SYSTEM IN THE COUNTRY. IT’S AFFECTING PHARMACISTS LIKE JON NICHOLSON, THE OWNER OF MAHASKA DRUG IN OSKALOOSA, WHO CAN’T TELL HIS CUSTOMERS HOW MUCH THEY OWE. WE COULD NOT SEE EMIT A CLAIM TO ANYBODY’S INSURANCE, SO WE COULD NOT TELL THEM WHAT THEIR CO-PAY WOULD BE OR ANYTHING LIKE THAT, JOHN FORBES, AN IOWA STATE REPRESENTATIVE, IS ALSO AN URBANDALE PHARMACIST. HE SAYS THE PAYOUT DELAYS ARE AFFECTING ANY PATIENTS USING DISCOUNT CARDS. IF YOU’RE LOOKING AT A CO-PAY DISCOUNT CARD, YOU’RE PROBABLY NOT GOING TO BE ABLE TO USE THAT AT THIS POINT IN TIME UNTIL THE SYSTEM IS FIXED. FIXED. THERE HAS BEEN WORK DONE TO PROVIDE RELIEF FOR PATIENTS AMID THE DELAYS, BUT FOR THE PHARMACISTS, IT’S JUST ONE INSTANCE OF A MUCH LARGER ISSUE. THE SYSTEM IS FRAGILE TO FRAUD AND COMPUTER HACKING, AND THAT’S WHAT HAPPENED IN THIS CASE. IT SHOWS HOW VULNERABLE OUR WHOLE SYSTEM IS AND HOW DEPENDENT WE ARE ON THE INTERNET ANYMORE. ACCORDING TO THAT UNITED HEALTH GROUP, ELECTRONIC PRESCRIBING IS NOW FULLY FUNCTIONAL. THEY ALSO SAY ELECTRONIC PAYMENT WILL BE AVAILABLE BEGINNING
Advertisement
UnitedHealth says wide swath of patient files may have been taken in Change cyberattack
UnitedHealth says files with personal information that could cover a “substantial portion of people in America” may have been taken in the cyberattack earlier this year on its Change Healthcare business.The company said Monday after markets closed that it sees no signs that doctor charts or full medical histories were released after the attack. But it may take several months of analysis before UnitedHealth can identify and notify people who were affected.UnitedHealth did say that some screen shots containing protected health information or personally identifiable information were posted for about a week online on the dark web, which standard browsers can’t access.The company is still monitoring the internet and dark web and said there has been no addition file publication. It has started a website to answer questions and a call center.The company also is offering free credit monitoring and identity theft protection for people affected by the attack.UnitedHealth said in February that a ransomware group had gained access to some of the systems of its Change Healthcare business, which provides technology used to submit and process insurance claims.The attack disrupted payment and claims processing around the country, stressing doctor’s offices and health care systems.Federal civil rights investigators are already looking into whether protected health information was exposed in the attack.UnitedHealth said Monday that it was still restoring services disrupted by the attack. It has been focused first on restoring those that affect patient access to care or medication.The company said both pharmacy services and medical claims were back to near normal levels. It said payment process was back to about 86% of pre-attack levels.UnitedHealth said last week when it reported first-quarter results that the company has provided more than $6 billion in advance funding and interest-free loans to health care providers affected by the attack.UnitedHealth took an $872 million hit from from the cyberattack in the first quarter, and company officials said that could grow beyond $1.5 billion for the year.Minnetonka, Minnesota-based UnitedHealth Group Inc. runs one of the nation’s largest health insurers. It also runs one of the nation’s largest pharmacy benefits management businesses, provides care and offers technology services.Company shares edged up 91 cents to $492.14 in late-morning trading Tuesday while broader indexes also climbed.

UnitedHealth says files with personal information that could cover a “substantial portion of people in America” may have been taken in the cyberattack earlier this year on its Change Healthcare business.

The company said Monday after markets closed that it sees no signs that doctor charts or full medical histories were released after the attack. But it may take several months of analysis before UnitedHealth can identify and notify people who were affected.

Advertisement

UnitedHealth did say that some screen shots containing protected health information or personally identifiable information were posted for about a week online on the dark web, which standard browsers can’t access.

The company is still monitoring the internet and dark web and said there has been no addition file publication. It has started a website to answer questions and a call center.

The company also is offering free credit monitoring and identity theft protection for people affected by the attack.

UnitedHealth said in February that a ransomware group had gained access to some of the systems of its Change Healthcare business, which provides technology used to submit and process insurance claims.

The attack disrupted payment and claims processing around the country, stressing doctor’s offices and health care systems.

Federal civil rights investigators are already looking into whether protected health information was exposed in the attack.

UnitedHealth said Monday that it was still restoring services disrupted by the attack. It has been focused first on restoring those that affect patient access to care or medication.

The company said both pharmacy services and medical claims were back to near normal levels. It said payment process was back to about 86% of pre-attack levels.

UnitedHealth said last week when it reported first-quarter results that the company has provided more than $6 billion in advance funding and interest-free loans to health care providers affected by the attack.

UnitedHealth took an $872 million hit from from the cyberattack in the first quarter, and company officials said that could grow beyond $1.5 billion for the year.

Minnetonka, Minnesota-based UnitedHealth Group Inc. runs one of the nation’s largest health insurers. It also runs one of the nation’s largest pharmacy benefits management businesses, provides care and offers technology services.

Company shares edged up 91 cents to $492.14 in late-morning trading Tuesday while broader indexes also climbed.