Notification of Change Healthcare Cyberattack

You are here

  • Home  /  
  • Notification of Change Healthcare Cyberattack

Incident Overview

Pioneer Human Services is informing clients about a recent cybersecurity incident involving Change Healthcare, a key vendor. This cyberattack may have compromised the personal data of some of our clients. We are dedicated to assisting those who may be affected by this breach.

Review the official notice [here].

Details of the Incident

On February 21, 2024, Change Healthcare identified a ransomware attack on its systems. Immediate actions were taken to halt the activity, including disconnecting systems to prevent further damage, initiating an investigation, and notifying law enforcement. Change Healthcare’s security team, along with top cybersecurity experts, worked tirelessly to address the issue and determine the scope of the breach. To date, there is no evidence that the incident extended beyond Change Healthcare’s systems.

Leading cybersecurity and data analysis firms were engaged to assist with the investigation, which commenced on February 21, 2024. By March 7, 2024, it was confirmed that a significant amount of data had been extracted between February 17, 2024, and February 20, 2024. On March 13, 2024, Change Healthcare received a secure dataset of exfiltrated files and began a preliminary analysis. On April 22, 2024, Change Healthcare announced that the breach could potentially impact a large number of individuals across the country.

On July 29, 2024, Change Healthcare began notifying affected individuals by mail. They are committed to informing all potentially impacted people as soon as possible, given the scale and complexity of the data involved.

Recommended Actions

Enroll in Complimentary Credit Monitoring
If you believe your information may have been compromised, you are eligible for two years of free credit monitoring and identity protection services. Change Healthcare will cover the cost of these services.  You can enroll by clicking "Enroll now" or by calling 1-888-846-4705.
Monitor Your Healthcare Information

Regularly review your explanation of benefits statements from your health plan and healthcare providers, as well as your financial documents, to check for any unusual activity. 

  • If you find any healthcare services you did not receive listed on an explanation of benefits statement, contact your health plan or doctor. 

  • If you detect any suspicious activity on your bank or credit card statements or tax returns, contact your financial institution immediately.

  • If you believe you are a victim of fraud, contact local law enforcement and file a police report. 

Frequently Asked Questions

What types of data were compromised?

Change Healthcare cannot confirm the exact data affected for each individual, but potentially compromised information may include contact details (name, address, date of birth, phone number, email) and one or more of the following:

  • Health insurance information (health plans, insurance companies, member/group ID numbers, government payor ID numbers);

  • Health information (medical record numbers, providers, diagnoses, medications, test results, images, care, and treatment);

  • Billing and payment information (claim numbers, account numbers, billing codes, payment cards, financial data, payments made, balance due);

  • Other personal details such as Social Security numbers, driver’s licenses, state ID numbers, or passport numbers.

The specific data involved may differ for each individual. Full medical histories or doctors’ charts have not appeared in the data reviewed thus far. Some information may pertain to guarantors who paid healthcare bills.
 

When will I be notified if my data was affected?

The review of the data is nearing completion. Change Healthcare has started mailing notices to those identified in the ongoing review who have sufficient address information. Note that not all impacted individuals may be reachable by mail. The notification process began on July 29 and will continue progressively.

What steps can I take to protect myself?

While the investigation is ongoing, there are several measures you can take to protect yourself:
  • Regularly review the explanation of benefits statements from your health plan and statements from healthcare providers, as well as bank and credit card statements, credit reports, and tax returns, for any unfamiliar activity.
  • If you find any healthcare services listed that you did not receive, contact your health plan or doctor immediately.
  • Report any suspicious activity on your bank or credit card statements or tax returns to your financial institution or credit card company without delay.
  • If you believe you are a victim of identity theft or fraud, contact local law enforcement to file a police report.