@Thaddeus Dziekanowski the attack on UnitedHealth has had a significant impact across the U.S, effecting patient care.

← Back to Blog

@Thaddeus Dziekanowski the attack on UnitedHealth has had a significant impact across the U.S, effecting patient care. An incident that one could consider material to the company and patients.

Given the unprecedented magnitude of this cyberattack, and in the best interest of patients and health care providers, OCR is initiating an investigation into this incident, HHS’ Office for Civil Rights said in a March 13 letter. OCR’s investigation of Change Healthcare and UHG will focus on whether a breach of protected health information occurred and Change Healthcare’s and UHG’s compliance with the HIPAA Rules.

The investigation into HIPPAA compliance to cybersecurity requirements, will be closely watched, their incident response and incident management and potential payment of a ransomware. Could one expect the regulator to examine the concentration risks associated with Change Healthcare as a top health insurance payment provider, the appropriate level of cybersecuirty risk management adopted by the company, and the role of senior management on the management of risk mitigation?

UnitedHealth filed its FY 2023 10K on the 28th February 2024. One wonders if there will be an examination of the material risks identified and submitted to the SEC (https://lnkd.in/eXaNRu2C)

Brian D. McCarthy Rachel V. Rose, JD, MBA

Veritas GRC

#cybersecurity #cyberriskmanagement #hipaacompliance #securitiesandexchangecommission

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7173954812739227648