On Feb. 21, 2024, Change Healthcare announced that they had been compromised by a cyber event. The cyber event is the largest ever reported in the US and affected approximately one-third of all US healthcare transactions.
Change Healthcare provided a variety of services to AHN, Highmark and thousands of other healthcare providers, pharmacies and insurance companies across the western PA region and country.
Change Healthcare and United Healthcare (Change’s parent company) announced on June 20 that they did experience a data breach as a result of the February cyber incident and are still investigating the scope and volume of data exposed.
Change plans to issue written letters to affected individuals beginning in late July.
In the interim, Change has posted a substitute notice to its website (available here), which includes an overview of the incident, types of information impacted, and steps individuals can take to protect themselves.
We are aware that HealthEquity, a Highmark Health vendor that provides COBRA and Commuter benefits to Highmark and AHN employees/former employees, has experienced a cyber event.
Highmark Health is working with HealthEquity to fully understand the nature and extent of the impact on our employees. HealthEquity will notify potentially impacted program participants with more details about the steps being take in response to the data exposure.
