[Last updated: March 27]
APTA began communication with UnitedHealth Group as soon as it was announced that their subsidiary Change Healthcare was breached, creating ongoing patient access problems, shut down claims processes, and prevented payment BEYOND pharmacy claims as the original announcement (2/22/24) received was focused on a breach primarily related to pharmacy claims.
APTA Resources
Key APTA Resource on APTA Website
UHC provided resources/info that APTA included in the APTA news stories shared with general membership last month. (below)
- March 19 article – UHC Cyberattack – CMS extends 2023 MIPS EUC Exception Application | PPS\
- March 13 article: News | CMS Offers Accelerated and Advanced Payments in Response to Change Cyberattack | APTA
- March 6 article: News | Massive Cyberattack: UnitedHealth Group Offers Workarounds, HHS Weighs In | APTA
UHC Resources:
Key Resource with daily updates from United Health Website
UnitedHealth Group describes the webpage as “a main source for the latest business and information updates, UnitedHealthcare, Optum and Change Healthcare stakeholders” with links to other resources.
The page includes information on temporary funding, a list of frequently asked questions, news updates, and more.
NEW! Watch this how-to video on the temporary funding process.
Federal & CMS News
The federal government continues to react to the United Health Group cybersecurity incident. A subsidiary of the group, Change Healthcare, which deals with as many as half of the payment transactions in the US health care system, has not corrected this breach, which initially occurred in February. CMS announced on Friday, March 15, another support for practices that have enrolled with MIPS, allowing for an extension of the Extreme and Uncontrollable Circumstances exception for those practices impacted by the breach.
- NEW: HHS Shares Individual Payers’ Assistance Information
HHS has compiled a toolkit that breaks down 10 commercial payers’ assistance programs and resources available to providers impacted by the Change cyberattack. Programs from United Health Group, AmeriHealth Caritas, Blue Cross Blue Shield, Centene, Cigna, CVS Health, Elevance, Humana, Kaiser Permanente, and Molina are detailed in the document, which also includes contact information for those payers and more. - Statement for Change Healthcare Non-enforcement Medicaid Informational Bulletin (Article 3/15/24)
- Change Healthcare/ Optum Payment Disruption (CHOPD) Accelerated and Advance Payments for Part A Providers and Part B Suppliers Frequently Asked Questions (Article 3/14)
- Change Healthcare Cybersecurity Incident – CMS Response and State Flexibilities (Article 3/13/24)
Congressional Hearing Information: Congress edges toward action amid Change Healthcare outage
More than three weeks since a cyberattack that continues to disrupt U.S. healthcare operations, Congress is still groping for a response. But paths forward have begun to emerge as awareness of the damage slowly spreads on Capitol Hill.
Many lawmakers still have no answers when asked about the Feb. 21 ransomware assault on Change Healthcare, a claims and billing processor within UnitedHealth Group’s Optum subsidiary. But a growing number of them are devising plans that range from holding hearings and putting pressure on federal agencies to enacting legislation.
For additional guidance, email: advocacy@apta.org