Cybersecurity news for hospitals and health systems

UnitedHealth Group admitted to paying ransom in an attempt to protect patient data stolen during the February cyberattack against its subsidiary, Change Healthcare, according to a CNBC report.

Hackers gained entry to Change Healthcare's IT systems nine days before the ransomware attack on the UnitedHealth Group subsidiary, The Wall Street Journal reported April 22.

A federal judge has recommended dismissing a class-action data breach lawsuit against Chicago-based CommonSpirit Health over a 2022 cyberattack.

Change Healthcare has reinstated 80% of the functionality for its claims, payment and pharmacy services following a February ransomware attack, the company said.

With the increasing number of technologies that track brain activity, a new Colorado law aims to protect people's "neural data" from falling into the wrong hands, The New York Times reported.

While the financial impacts of the Change Healthcare hack have gotten a lot of attention, the cyberattack has also harmed patients, health system leaders say.

Conway (S.C.) Medical Center is conducting an internal investigation regarding accusations of mishandling of confidential patient health data, The Sun News reported April 18.

The American Hospital Association submitted a statement to the House Energy and Commerce Health Subcommittee stating its concerns for potential penalties for hospitals and health systems that do not meet cybersecurity standards outlined by the Biden administration.

Hackers have reportedly begun to sell patient data and business agreements they claim were stolen in the Change Healthcare cyberattack.

UnitedHealth Group drew the ire of federal lawmakers during the first hearing on the fallout surrounding the unprecedented cyberattack on Change Healthcare in late February.