JD Supra July 5, 2024
Earlier this year, a cyberattack on a leading healthcare claims processing provider had an unprecedented impact on patients and healthcare providers across the country. While group health plans were not directly targeted in the attack, the magnitude of the incident serves as an important reminder for plan sponsors and fiduciaries to ramp up their cybersecurity efforts. When you think about health data security, HIPAA might be the first law that comes to mind. However, ERISA can also come into play due its rules for plan fiduciaries. We’ll give you an overview of the costly cyberattack and what you should know about your cybersecurity responsibilities as a plan sponsor or fiduciary under ERISA.
Change Healthcare Cyberattack
On February 21, cyber criminals...