Notice About Change Healthcare Cybersecurity Incident


September 23, 2024

What happened?

On February 21, 2024, Change Healthcare, Inc. (CHC), a business associate of Shepherd Center and many other healthcare organizations in the U.S., identified a ransomware attack on its computer system. CHC took steps to stop the attack and contacted law enforcement, but healthcare data was compromised. Since that time, CHC has been investigating the impact of the attack and the patients and institutions affected by the incident.  

Was your data affected?

CHC is reviewing the impacted data containing protected health information (PHI) and is notifying affected customers and individuals. If CHC determines that your data was affected, to the extent they can do so, they will be contacting you individually.  However, CHC has posted a HIPAA Substitute Notice to provide more information on the incident, information on protecting your privacy, and information on enrolling in complimentary credit monitoring and identity theft protection services for individuals concerned their data may have been affected. We encourage you to review this information available at changehealthcare.com/hipaa-substitute-notice.

Where can you get more information?

In addition to the substitute notice linked above, additional information on the incident and enrolling in CHC’s offered services can be found at changecybersupport.com or by calling 1-866-262-5342.