Change Healthcare Experiences System Outages After Cyberattack

On February 21, 2024, Change Healthcare, a technology company owned by United Health Group (UHG) that is used to transmit healthcare facilities’ claims and process payments, became aware of a cyberattack that accessed one of the company’s systems. Change Healthcare isolated its systems to avoid being further compromised, bringing many of its healthcare facility-facing networks offline. A number of these systems remain offline currently. 

ASA has received reports from members that some anesthesia groups, particularly those that have exclusive claims processing and payment relationships with Change Healthcare, may be unable to process claims made after the outage began on February 21. The Centers for Medicare and Medicaid Services (CMS) stated that the agency will consider offering accelerated Medicare payments to affected facilities and physicians. In the meantime, the Department of Health and Human Services (HHS) announced that “Medicare providers needing to change clearinghouses that they use for claims processing during these outages should contact their Medicare Administrative Contractor (MAC) to request a new electronic data interchange (EDI) enrollment for the switch.” CMS is taking additional steps to reduce the burden of the outages, including preparing MACs to accept paper claims and encouraging Medicare Advantage and Part D sponsors as well as Medicaid and CHIP managed care plans to suspend or relax prior authorization. 

ASA has made policymakers in Washington, DC aware of the shutdown’s impact on anesthesiology practices and has urged immediate action.  

UHG stated that any systems that are live and online can be considered safe-to-use, while the company is currently working to re-launch the offline systems, including payment services, payer communications, and claims submissions. UHG also stated that there is no indication that United Healthcare or Optum systems have been affected by the cyberattack. 

ASA will update members as we learn more.

UHG published a webpage with information and frequently asked questions about the effects of the cyberattack and the ongoing outages. The American Medical Association also provided a webpage with updates on the outages and resources for physicians and health care staff.

Please contact the ASA Department of Quality and Regulatory Affairs at [email protected] with any questions.