State attorneys general send warnings of Change Healthcare breach, urge residents to respond

Multiple state attorney generals have sent notices, informing residents about the Change Healthcare breach and urging them to enroll in the credit monitoring and identity theft protection the company is required to offer under HIPAA regulations.

The notices have been covered by local news outlets in multiple states, with attorneys general assuming many people in every state will be impacted, given the cyberattack resulted in personal information and medical records of an estimated one-third of Americans being put up for sale on the dark web.

“The recent data breach at Change Healthcare is unprecedented and could affect millions of Minnesotans,” Minnesota Attorney General Keith Ellison said in a statement. “I encourage everyone to avail themselves of the free credit monitoring and identity theft protections being offered by Change Healthcare, and to be on the lookout for signs that bad actors have access to their personal and medical information.”

Other state attorneys general have made similar statements, with some warning that, although the initial ransomware attack on Change Healthcare happened in February, residents should still remain vigilant.

“Typically, when there is a data breach impacting Nevada residents, consumers receive an individualized letter or email if their data was impacted. However, Change Healthcare has not yet provided individual notice to consumers,” a statement from Nevada Attorney General Aaron D. Ford’s office read. “Given the delay between the data breach and notification to those impacted, Attorney General Ford is publicizing not just the breach, but also resources, including the offer that Change Healthcare has provided to the public.”

Change Healthcare recently posted a notice on its website, alerting patients that their medical records may have been taken by hackers, along with insurance information and personal contact information, including social security numbers and passport information.

Patients are expected to receive individual notices in the coming months, as Change Healthcare will begin sending them in the near future.

Chad Van Alstin Health Imaging Health Exec

Chad is an award-winning writer and editor with over 15 years of experience working in media. He has a decade-long professional background in healthcare, working as a writer and in public relations.

Around the web

When regulating AI-equipped medical devices, the FDA might take a page from the Department of Transportation’s playbook for overseeing AI-equipped vehicles. These run the gamut from assisting human drivers to fully taking the wheel. 

Kit Crancer, RBMA board member, speaks with Radiology Business about key legislative developments on the Hill that will affect the specialty. 

California-based Acutus Medical has said its ongoing agreement to manufacture and distribute left-heart access devices for Medtronic is the company's only source of revenue.