Hospital groups question HHS about data breach reporting after Change Healthcare attack

Cybersecurity Dive March 25, 2024
Susanna Vogel

In a Thursday letter, the American Hospital Association urged the HHS’ Office of Civil Rights to reduce “duplicative” breach notifications from the cyberattack.

Dive Brief:

• In a Thursday letter to the HHS’ Office for Civil Rights, hospital lobbying organizations sought to clarify who may need to provide data breach notifications to patients following the cyberattack on UnitedHealth’s Change Healthcare: the hospitals that contracted with Change, or the organization directly attacked.
• The letter, penned by counsels for the American Hospital Association and the Federation of American Hospitals, said the onus should be on UnitedHealth and Change alone to report a breach, should one be found.
• Requiring hospitals to also issue breach notifications could result in patients receiving duplicate...

Today's Sponsors

Today's Sponsor