The "Change Healthcare" Fiasco: A Domino Effect on Patient Care?

The "Change Healthcare" Fiasco: A Domino Effect on Patient Care?

There is an ask at the bottom of this article for YOU. Please repost so we can get as many people as possible to contribute.


The recent cyberattack on Change Healthcare, a subsidiary of UnitedHealth Group, has sent shockwaves through the healthcare industry. This isn't your typical data breach; it's a disruption at the very foundation of healthcare transactions in the US. Change Healthcare processes a staggering 15 billion health-related transactions annually. Shutting it down created a ripple effect that had far-reaching consequences for patients and providers alike. It is a whole different level of supply-chain breach.

Beyond the Headlines: What's at Stake?

News articles focus on the attack itself, who did it, and the potential damages, but the real story lies in the disruption of critical healthcare processes.

Imagine the following effects:

  • Prescription Delays: Delays in processing prescriptions, leaving patients waiting for crucial medications.
  • Hamstrung Providers: Hospitals and clinics rely on Change Healthcare services for tasks like prior authorization for procedures. Delays in this process postponed essential treatments.
  • Revenue Shortfalls: Disruptions in billing put a financial strain on providers, impacting their ability to deliver care and potentially raising rates in the future to recover those costs. Patients will likely pay that burden.
  • Erosion of Trust: A core tenet of the doctor-patient relationship is trust. This breach could raise concerns about the security of sensitive health information.

This isn't just about technology; it's about patient care. Delays, disruptions, and financial strains caused by this attack have the potential to impact real people in real ways.

A Call to Action: Rethinking Healthcare Cybersecurity

The Change Healthcare attack underscores the urgent need to strengthen cybersecurity measures within the healthcare industry. Here are some questions to ponder:

  • Are we focusing too much on data breaches and not enough on operational security?
  • Do current regulations and frameworks adequately address the evolving cyber threat landscape?
  • How can we build a healthcare ecosystem where data is secure without hindering the efficient delivery of care?

This isn't just about assigning blame. It's about collectively rethinking our approach to healthcare cybersecurity. Stakeholders across the board - from tech companies to healthcare providers, and policymakers to patients - need to work together to create a more secure future.

The Change Healthcare attack may have been a blow, but let's not let it be in vain. Let's use it as a catalyst for building a more resilient healthcare system, where patient care and data security go hand in hand.

Ask of our Government:

We recently saw the news tout an International law enforcement collaboration led by the UK's National Crime Agency and the FBI, resulting in the arrests and indictments of members from the infamous Lockbit ransomware gang, dismantling a group responsible for over 2,000 attacks globally, raking in over $120 million in stolen funds.

This is good start, but we need more international cooperation, and stronger legal avenues to make arrests and deliver harsher punishments. Knowing that there are many other people on LinkedIn that can contribute this thought, I would like to hear how we are already addressing the following topics:

ASK OF YOU

Please comment on this article giving your thoughts about any of the following topics, or write your own post and reference this one please. If you don't provide thoughts, please repost.

Enhance International Cyber Cooperation:

  • International cyber task force
  • International cyber treaties and norms
  • International training and assistance

II. Strengthen Healthcare Cyber Defense:

  • What Healthcare cybersecurity standards are valuable? What is needed?
  • Provide funding and resources to supply-chain smaller companies?
  • Increase collaboration and information sharing.

III. Increase Legal Avenues for Holding Perpetrators Accountable:

  • International cyber legal frameworks.
  • Enhance domestic cybercrime legislation
  • Increase resources for law enforcement


My thoughts are my own.

Craig works for Trellix - formerly McAfee, FireEye and SkyHigh

By combining the expertise of these leading security companies, Trellix is dedicated to offering healthcare providers a comprehensive and adaptable solution (Living Security through XDR) to combat evolving cyber threats. We believe in building a future where patients can trust that their information is secure and providers can focus on delivering the best possible care, uninterrupted.

Cache Walker

Director Customer Marketing @ Trellix | Marketing, Advocacy, User Feedback

8 个月

This one hit home Craig, just this week my pharmacy was processing one of my medications and told me the co-pay would be $950 until their systems recovered and they could process other elements of the process. So many connected pieces, and strategies that need to be connected for continued security across this sector.

?? Rebecca Corvese ??

Sr. Talent Acquisition Partner/Recruiter : Majors, Enterprise, Commercial, Federal, Public Sector, IT

8 个月

Nice article, Craig. I know there are already platforms in place, but to increase collaboration and information sharing, we should establish a standardized dedicated platform where healthcare organizations, cybersecurity experts, government agencies and other relevant stakeholders can share information. It should include online forums. We should also continue to foster partnerships between government agencies, such as the Department of Health and Human Services or CISA and private sector organizations, including healthcare providers, technology companies and cybersecurity firms to facilitate the exchange of threat intelligence and collaborative responses to cyber incidents. Our very own CEO, Bryan Palma, has a seat at the White House table, as part of the National Security Telecommunications Advisory Committee, and can work to effect change for us all. And, of course, what you have just done here, asking for specific participation and response actions, is exactly what we all should be doing!

Bill Thorn

Passionate about Cybersecurity, Cyber Risk and the Digital Future. Strategist | Architect | CISO | Chief Security Officer | Chief Technology Officer | Board Advisor | Consultant | Privacy Advocate

8 个月

Plenty of conversation to be had Craig. Thanks for bringing it to the forefront. Would be nice to see leadership from the industries before we get runaway legislation.

要查看或添加评论,请登录

社区洞察

其他会员也浏览了