Current:Home > FinanceHacking at UnitedHealth unit cripples a swath of the U.S. health system: What to know -MoneySpot
Hacking at UnitedHealth unit cripples a swath of the U.S. health system: What to know
View
Date:2025-04-13 12:08:49
Early in the morning of Feb. 21, Change Healthcare, a company unknown to most Americans that plays a huge role in the U.S. health system, issued a brief statement saying some of its applications were "currently unavailable."
By the afternoon, the company described the situation as a "cybersecurity" problem.
Since then, it has rapidly blossomed into a crisis.
The company, recently purchased by insurance giant UnitedHealth Group, reportedly suffered a cyberattack. The impact is wide and expected to grow. Change Healthcare's business is maintaining health care's pipelines — payments, requests for insurers to authorize care, and much more. Those pipes handle a big load: Change says on its website, "Our cloud-based network supports 14 billion clinical, financial, and operational transactions annually."
Initial media reports have focused on the impact on pharmacies, but techies say that's understating the issue. The American Hospital Association says many of its members aren't getting paid and that doctors can't check whether patients have coverage for care.
But even that's just a slice of the emergency: CommonWell, an institution that helps health providers share medical records, information critical to care, also relies on Change technology. The system contained records on 208 million individuals as of July 2023. Courtney Baker, CommonWell marketing manager, said the network "has been disabled out of an abundance of caution."
"It's small ripple pools that will get bigger and bigger over time, if it doesn't get solved," Saad Chaudhry, chief digital and information officer at Luminis Health, a hospital system in Maryland, told KFF Health News.
Here's what to know about the hack.
Who did it?
Media reports are fingering ALPHV, a notorious ransomware group also known as Blackcat, which has become the target of numerous law enforcement agencies worldwide. While UnitedHealth Group has said it is a "suspected nation-state associated" attack, some outside analysts dispute the linkage. The gang has previously been blamed for hacking casino companies MGM and Caesars, among many other targets.
The Department of Justice alleged in December, before the Change hack, that the group's victims had already paid it hundreds of millions of dollars in ransoms.
Is this a new problem?
Absolutely not. A study published in JAMA Health Forum in December 2022 found that the annual number of ransomware attacks against hospitals and other providers doubled from 2016 to 2021.
"It's more of the same, man," said Aaron Miri, the chief digital and information officer at Baptist Health in Jacksonville, Florida.
Because the assaults disable the target's computer systems, providers have to shift to paper, slowing them down and making them vulnerable to missing information.
Further, a study published in May 2023 in JAMA Network Open examining the effects of an attack on a health system found that waiting times, median length of stay, and incidents of patients leaving against medical advice all increased — at neighboring emergency departments. The results, the authors wrote, mean cyberattacks "should be considered a regional disaster."
Attacks have devastated rural hospitals, Miri said. And wherever health care providers are hit, patient safety issues follow.
What does it mean for patients?
Year after year, more Americans' health data is breached. That exposes people to identity theft and medical error.
Care can also suffer. For example, a 2017 attack, dubbed "NotPetya," forced a rural West Virginia hospital to reboot its operations and hit pharma company Merck so hard it wasn't able to fulfill production targets for an HPV vaccine.
Because of the Change Healthcare attack, some patients may be routed to new pharmacies less affected by billing problems. Patients' bills may also be delayed, industry executives said. At some point, many patients are likely to receive notices their data was breached. Depending on the exact data that has been pilfered, those patients may be at risk for identity theft, Chaudhry said. Companies often offer free credit monitoring services in those situations.
"Patients are dying because of this," Miri said. Indeed, an October preprint from researchers at the University of Minnesota found a nearly 21% increase in mortality for patients in a ransomware-stricken hospital.
How did it happen?
The Health Information Sharing and Analysis Center, an industry coordinating group that disseminates intel on attacks, has told its members that flaws in an application called ConnectWise ScreenConnect are to blame. Exact details couldn't be confirmed.
It's a tool tech support teams use to remotely troubleshoot computer problems, and the attack is "apparently fairly trivial to execute," H-ISAC warned members. The group said it expects additional victims and advised its members to update their technology. When the attack first hit, the AHA recommended its members disconnect from systems both at Change and its corporate parent, UnitedHealth's Optum unit. That would affect services ranging from claims approvals to reference tools.
Millions of Americans see physicians and other practitioners employed by UnitedHealth and are covered by the company's insurance plans.
UnitedHealth has said only Change's systems are affected and that it's safe for hospitals to use other digital services provided by UnitedHealth and Optum, which include claims filing and processing systems.
But not many chief information officers "are jumping to reconnect," Chaudhry said. "It's an uneasy feeling."
Miri says Baptist is using the conglomerate's technology and that he trusts UnitedHealth's word that it's safe.
Where's the federal government?
Neither executive was sanguine about the future of cybersecurity in health care. "It's going to get worse," Chaudhry said.
"It's a shame the feds aren't helping more," Miri said. "You'd think if our nuclear infrastructure were under attack the feds would respond with more gusto."
While the departments of Justice and State have targeted the ALPHV group, the government has stayed behind the scenes more in the aftermath of this attack. Chaudhry said the FBI and the Department of Health and Human Services have been attending calls organized by the AHA to brief members about the situation.
Miri said rural hospitals in particular could use more funding for security and that agencies like the Food and Drug Administration should have mandatory standards for cybersecurity.
There's some recognition among officials that improvements need to be made.
"This latest attack is just more evidence that the status quo isn't working and we have to take steps to shore up cybersecurity in the health industry," said Sen. Mark Warner (D-Va.), the chair of the Senate Select Committee on Intelligence and a longtime advocate for stronger cybersecurity, in a statement to KFF Health News.
KFF Health News (formerly known as Kaiser Health News, or KHN) is a national newsroom that produces in-depth journalism about health issues. Together with Policy Analysis and Polling, KHN is one of the three major operating programs at KFF (Kaiser Family Foundation). KFF is an endowed nonprofit organization providing information on health issues to the nation.
- In:
- Cybersecurity and Infrastructure Security Agency
- UnitedHealth Group
- Cyberattack
veryGood! (92739)
Related
- Meta donates $1 million to Trump’s inauguration fund
- U.S. cities consider banning right on red laws amid rise in pedestrian deaths
- Owner of Black-owned mobile gaming trailer in Detroit wants to inspire kids to chase their dreams
- The Fate of The Bear Will Have You Saying Yes, Chef
- Jorge Ramos reveals his final day with 'Noticiero Univision': 'It's been quite a ride'
- Washington's Zion Tupuola-Fetui has emotional moment talking about his dad after USC win
- Taylor Swift walks arm in arm with Selena Gomez, Brittany Mahomes for NYC girls night
- Animal shelters think creatively to help families keep their pets amid crisis
- Have Dry, Sensitive Skin? You Need To Add These Gentle Skincare Products to Your Routine
- Three found dead inside Missouri home; high levels of carbon monoxide detected
Ranking
- The White House is cracking down on overdraft fees
- Inspired by online dating, AI tool for adoption matchmaking falls short for vulnerable foster kids
- Abortion debate has dominated this election year. Here are Tuesday’s races to watch
- Universities of Wisconsin unveil plan to recover $32 million cut by Republicans in diversity fight
- California DMV apologizes for license plate that some say mocks Oct. 7 attack on Israel
- 3 new poetry collections taking the pulse of the times
- Who is the Vikings emergency QB? Depth chart murky after Cam Akers, Jaren Hall injuries
- Ethiopia says disputed western Tigray will be settled in a referendum and displaced people returned
Recommendation
Which apps offer encrypted messaging? How to switch and what to know after feds’ warning
Tyson recalls 30,000 pounds of chicken nuggets after metal pieces were found inside
Cody Dorman, who watched namesake horse win Breeders’ Cup race, dies on trip home
AP PHOTOS: Pan American Games feature diving runner, flying swimmer, joyful athletes in last week
'We're reborn!' Gazans express joy at returning home to north
Vikings QB Joshua Dobbs didn't know most of his teammates' names. He led them to a win.
Trump's decades of testimony provide clues about how he'll fight for his real estate empire
Animal shelters think creatively to help families keep their pets amid crisis