Great Lakes Wire

LANSING – Michigan Attorney General Dana Nessel is sharing consumer protection reminders and raising awareness about the availability of free credit monitoring and identity theft protection services following Change Healthcare’s February data breach. In April, Nessel joined other attorneys general in sending a letter to UnitedHealth Group, Inc.—the nation’s largest health insurer and the parent company of Change Healthcare—urging the corporation to take more meaningful action to better protect providers, pharmacies, and patients harmed by the recent breach.

Change Healthcare, a unit of UnitedHealth, is the nation’s biggest electronic data clearinghouse. Its technological infrastructure is used by tens of thousands of providers, pharmacies, and insurers to verify insurance, confirm pre-authorization of procedures or services, exchange insurance claim data, and perform other administrative tasks essential to healthcare delivery.

The February cyberattack interrupted operations for thousands of doctors’ offices, hospitals, and pharmacies. It also resulted in Americans’ sensitive health and personal data being leaked onto the dark web—a hidden portion of the Internet where cyber criminals buy, sell, and track personal information. The actual number and identity of affected patients are currently unknown.

Change Healthcare has publicly stated that the data breach could impact up to one-third of all Americans. Typically, when there is a data breach impacting Michigan residents, consumers receive an individualized letter or email if their data was impacted. However, Change Healthcare has not yet provided individual notice to consumers. Given the delay between the data breach and notification to those impacted, AG Nessel is publicizing not just the breach but also resources available from Change Healthcare.

“Healthcare data breaches are a growing concern, putting potentially millions of patients at risk,” Nessel said. “Michiganders who believe they were impacted by the Change Healthcare breach should consider the company’s free credit monitoring and identity theft protection offers. I remain committed to working with attorneys general across the country to protect consumers and ensure those affected have access to the resources they need. My consumer protection team is ready to assist victims of this cyberattack.”

Change Healthcare is offering all Michigan residents who believe they may have been impacted free credit monitoring and identity theft protection services for two years. The dedicated website and call center will not be able to provide individuals details about whether their data was impacted but can guide them through getting set up for these protections. Since Change Healthcare has not yet provided notice to individuals and given the significant impact potentiality involved it is safest for everyone to assume that their information has been compromised.

For information visit Change Healthcare Consumer support page - UnitedHealth Group.

To enroll in credit monitoring through IDX use the link at Change Healthcare Consumer support page - UnitedHealth Group or call 1-888-846-4705.

For additional support from Change Healthcare call 1-866-262-5342.

Consumers should be aware of potential warning signs that someone is using their medical information:

A bill from their doctor for services they did not receive;

Errors in their Explanation of Benefits statement like services they never received or prescription medications they do not take;

A call from a debt collector about a medical debt they do not owe;

Medical debt collection notices on their credit report that they do not recognize;

A notice from their health insurance company indicating they have reached their benefit limit; or

Being denied insurance coverage because their medical records show a pre-existing condition they do not have.

If consumers are concerned that their data may have been impacted but prefer not to use free resources provided by Change Healthcare, they can also consider freezing their credit.

A credit freeze prevents creditors—such as banks or lenders—from accessing individuals' credit reports. This will stop identity thieves from taking out new loans or credit cards in consumers' names because creditors will not approve loans or credit requests if they cannot first access credit reports. By law, a credit bureau must allow placing temporarily lifting or removing a credit freeze for free.

When consumers freeze their credit with each bureau: Experian Equifax TransUnion

Equifax: +1 (888) 766-0008

Experian: +1 (888) 397-3742

TransUnion: +1 (800) 680-7289

Cyberattacks in healthcare have increased in both frequency and severity recently Data breaches involving PHI must be reported U.S Department Health & Human Services Office Civil Rights hhs.gov HIPAA-covered entities Since beginning year portal shows breaches impacted PHI nearly 38 million individuals Joining AG Nessel sharing consumer protection resources bipartisan group attorneys general across country

###