A significant cyberattack struck Change Healthcare this week. Change is a subsidiary of UnitedHealth Group, one of the largest health insurance companies in the country. Early statements from Change indicate their preliminary assessment shows the attack was originated by a “suspected nation-state associated cyber security threat actor.” The attack led to widespread disruptions in the company’s processing system and affected many pharmacies’ ability to process prescriptions.
The cyberattack, identified on Wednesday, led to immediate action by UnitedHealth Group. The company isolated the compromised systems to protect partners and patients and commenced remediation efforts. Despite these measures, the service restoration timeline remains uncertain as the company collaborates with law enforcement and security specialists.
U.S. Health Insurance Company Hit With Cyberattack From ‘Suspected Nation-State’ Actor, Crippling Pharmacies’ Ability To Process Prescriptions https://t.co/J3ICziWrQi pic.twitter.com/PqoO7j5S3i
— Daily Wire News (@DailyWireNews) February 23, 2024
The incident has significantly affected prescription services. Pharmacies reported delays and operational challenges, including those within military facilities like the Naval Hospital in Camp Pendleton and Evans Army Community Hospital. Tricare, the military health care program, announced that manual procedures would be in place until the issue is resolved.
The American Hospital Association issued an alert to its members, advising them to fall back on other UnitedHealth Group prescription systems in the event of an interruption in Change’s functionality. Major pharmacy chains including CVS and Walgreens have issued statements to their customers to assure them that work is underway to ensure prescriptions will be filled on time as needed.
UnitedHealth Group’s response to the cyberattack highlights the ongoing battle between corporate defenses and cybercriminals. Companies like Change Healthcare handle billions of healthcare transactions annually, so the stakes for securing their systems are incredibly high. The breach is a direct reminder of the importance of robust cybersecurity measures and the constant threat posed by sophisticated cyber adversaries who aim to disrupt essential services for terroristic or warfare objectives.
As the situation unfolds, the focus remains on restoring services and ensuring patient care is not compromised. However, this incident will likely prompt reevaluating cybersecurity practices within the healthcare industry and beyond. With the nature of the attack suspected to be of a nation-state origin, the implications extend beyond mere corporate disruption, touching on national security concerns.
This latest cyberattack on America’s commercial infrastructure is a wake-up call, serving as a reminder of the persistent and evolving threats posed by hostile foreign actors.
