Cybersecurity Experts Testify in Congress Inquiry on Change Healthcare Attack

Washington, D.C. – The cyberattack on Change Healthcare in February wreaked havoc on healthcare payment systems across the United States, causing disruptions in insurance claim processing and leaving hospitals struggling with unpaid claims. Change Healthcare, a subsidiary of UnitedHealth Group, specializes in providing technology for the submission and processing of insurance claims.

In the aftermath of the attack, a survey conducted revealed that about 80 percent of hospitals reported significant impacts on their cash flow, resulting in delays in payments. To mitigate the financial strain on hospitals, the administration took swift action by approving accelerated and advance payments for Medicare claims to help alleviate the financial burden on healthcare providers.

As the fallout from the cyberattack continues to unfold, Congress has initiated inquiries into the incident. The House Energy & Commerce Health subcommittee is scheduled to convene a hearing to delve into cybersecurity issues within the healthcare sector, featuring testimonies from cybersecurity experts who will shed light on the vulnerabilities exposed by the attack.

Senator Ron Wyden, Chair of the Senate Finance Committee, announced plans to hold a hearing to address the Change Healthcare cyberattack, emphasizing the need for enhanced cybersecurity measures within the healthcare industry. During a speech at the American Hospital Association’s Annual Membership Meeting, Wyden highlighted the inherent risks faced by the health sector, noting that criminal entities and foreign adversaries view it as a prime target for cyber exploitation.

While details about the upcoming Senate Finance Committee hearing remain unconfirmed, reports suggest that UnitedHealth Group CEO Andrew Witty is slated to testify before Congress on April 30. The prospect of Witty’s testimony offers a crucial opportunity for lawmakers to glean insights into the implications of the cyberattack on Change Healthcare and the broader implications for cybersecurity in the healthcare ecosystem. This hearing presents a vital platform for stakeholders to address systemic cybersecurity risks and explore strategies to fortify the industry against future cyber threats.