Hospital groups question HHS about data breach reporting after Change attack

Healthcare DIVE March 22, 2024
Susanna Vogel

In a Thursday letter, the American Hospital Association urged the HHS’s Office of Civil Rights to reduce possible “duplicative” breach notifications from the Change cyberattack.

Dive Brief:

• In a Thursday letter to the HHS’ Office for Civil Rights, hospital lobbying organizations sought to clarify who may need to provide data breach notifications to patients following the cyberattack on UnitedHealth’s Change Healthcare: the hospitals that contracted with Change, or the organization directly attacked.
• The letter, penned by counsels for the American Hospital Association and the Federation of American Hospitals, said the onus should be on UnitedHealth and Change alone to report a breach, should one be found.
• Requiring hospitals to also issue breach notifications could result in patients...

Today's Sponsors

Today's Sponsor