United Healthcare updated its key Change Healthcare cyberattack response website on March 13 and 14.
On March 13, 2024,HHS’s Office for Civil Rights circulated a Dear Colleague Letter re Change Healthcare cyberattack and announced opening a HIPAA privacy and security rule compliance investigation of United Healthcare.
HHS also offers a readout of a March 12, 2024, “Biden-Harris Administration Convening with Health Care Community Concerning Cyberattack on Change Healthcare.”
Reuters adds “UnitedHealth Group has already been hit with at least six class action lawsuits accusing it of failing to protect millions of people's personal data from last month's hack of Change Healthcare, its payment processing unit, with more lawsuits likely to come.
In a motion filed late on Tuesday in Washington, D.C., plaintiffs' lawyers asked a federal judicial panel to consolidate the six cases in federal court in Nashville, Tennessee, where Change is headquartered, and said they expected more cases to be filed.”