What you should know about the UnitedHealth cyberattack

On Feb. 21, hackers accessed an IT system at a subsidiary of UnitedHealth Group, which is based in Minnetonka. This prompted the company to suspend operations of the electronic data clearinghouse and related systems at its Change Healthcare business. These systems are used widely by pharmacies, hospitals and clinics. Change processed an estimated 50% of of all U.S. medical claims in recent years.

Immediately after the hack, drugstores could not verify coverage for medications at the pharmacy counter, although UnitedHealth Group says these systems now have been fully restored. Hospitals and clinics have been unable to file claims for payment from insurance companies, raising worries for how they will financially maintain their businesses.

The company says cybercrime threat actors gained access to certain information technology systems at Change Healthcare, and the actor represented itself as ALPHV/Blackcat. This group is notorious for encrypting data to hold it hostage in order to secure massive ransoms via cryptocurrency. UnitedHealth says all other company systems are operational.

This affects many health insurers — not just United — because Change’s systems are used throughout the health care system. In all cases, there shouldn’t be a disruption in the care you receive. Hospitals and clinics might not be able to say right now what you owe in deductibles. And there are longer-term concerns about patients receiving late and/or erroneous bills as the mess gets sorted. Risks from stolen data are unclear.