
The Change Healthcare Cyberattack: What It Is and Its Implications
A number of Healthcare Labyrinth blog readers asked me if I would write on the Change Healthcare cyberattack and its implications. Below is what I have culled together over the past month and my thoughts about what happened and repercussions. I will attempt to write at a high level and not get too technical – in part because details are still scarce. Overview of what happened We are a month into the Change Healthcare cyberattack. On February 21, 2024, Change Healthcare reported that it was a victim of a cyberattack. It appears that the attack was a ransomware attack by the BlackCat organization and affiliates. It is known to target the healthcare industry. Change Healthcare may have paid a ransom of as much as $22 million, but this has not been confirmed. The attackers claimed about six terabytes of PHI and PII data were stolen (this could be tens of