A few weeks ago, America’s largest health insurers, including its subsidiary, Change Healthcare, suffered a significant cyberattack. To this day, members of the Tampa Bay patient community are still in the dark about the matter. The incident has led to three class-action lawsuits and is currently under federal investigation. Despite advancements in cyber forensics and the implementation of improved security measures, these kinds of data breaches remain alarmingly common.
This cyberattack has highlighted the urgent need to prioritize cybersecurity in the healthcare sector. The lessons learned from this incident might reinforce the privacy of patients’ data, promote transparency in reporting breaches, and help to prevent similar attacks in the future.
Change Healthcare processes, verifies, and coordinates insurance billing, making it a seamless process for patients and providers. Unfortunately, this cyberattack has put into question the safety of their system. The perpetrators of this attack have been identified as the infamous BlackCat group.
Cyberattack highlights healthcare data vulnerabilities
They are known for their development of ransomware, in which they encrypt a victim’s data and demand a ransom for decryption.
The BlackCat group claims to have obtained over six terabytes of data from Change Healthcare including millions of medical and dental records, Social Security numbers, and information on active U.S. military personnel. Apparently, they are demanding a ransom to prevent the release or sale of this data. While the authorities are working closely with Change Healthcare to investigate the breach, it is yet unclear what information has been compromised.
Rumors of a $22 million Bitcoin payment to an account linked to BlackCat have been circulating, suggesting the possibility that Change Healthcare may have given in to the ransom demand. In the meantime, investigations are ongoing, while BlackCat’s transaction records continue to be studied closely. Nevertheless, Change Healthcare remains silent on whether they have indeed paid the ransom, leaving the matter unconfirmed.
Strangely enough, despite the seriousness of the attack, patients in Tampa Bay remain uninformed about whether their personal data has been compromised. Organizations affiliated, such as HCA Healthcare and BayCare Health System, also claim to have received no official information about the breach. The insurance company that fell victim to the attack has yet to release further details on the incident, further escalating the anxiety among the affected community.
In lieu of more definitive information from the health insurance company and investigating authorities, patients, healthcare bodies, and advocates must stay vigilant and monitor the situation closely. This event underscores the urgency of improved cybersecurity measures and stricter regulations to ensure the safety of personal and delicate data.
