Healthcare Innovation May 20, 2024
Office for Civil Rights should publicly state that United Health Group is responsible for all breach reporting obligations related to the ransomware attack, letter states
CHIME, AHIMA, the American Medical Association, and most state medical associations have penned a letter to the U.S. Department of Health & Human Services’ Office for Civil Rights (OCR) to request more clarity around reporting responsibilities related to the Change Healthcare data breach.
The ransomware attack on Change Healthcare, first reported on Feb. 21, has been disruptive throughout the healthcare sector. UnitedHealth, parent company of Change, estimated that the breach’s costs could reach $1.6 billion.
In their letter to OCR, the provider organizations stressed that OCR should publicly state that its breach investigation and immediate...