HHS Office for Civil Rights investigates UnitedHealth Group's cyberattack on Change Healthcare for potential breach of protected health information and HIPAA compliance.

The US Department of Health and Human Services (HHS) has initiated an investigation into UnitedHealth Group's cyberattack on its Change Healthcare unit, following disruptions in crucial operations in American pharmacies and hospitals. The HHS Office for Civil Rights (OCR) is conducting the investigation due to the "unprecedented magnitude of the cyberattack." UnitedHealth has not specified what information was compromised or if it has paid a ransom. The OCR's investigation will focus on whether a breach of protected health information occurred and if the company complied with Health Insurance Portability and Accountability Act (HIPAA) Rules.

March 13, 2024
14 Articles