Change Healthcare Cyberattack

While Change Healthcare cannot confirm exactly what data has been affected for each impacted individual, information that may have been impacted for affected patients and members may have included contact information (such as first and last name, address, date of birth, phone number, and email) and one or more of the following: 
 

• Health insurance information (such as primary, secondary or other health plans/policies, insurance companies, member/group ID numbers, and Medicaid-Medicare-government payor ID numbers);
   

• Health information (such as medical record numbers, providers, diagnoses, medicines, test results, images, care, and treatment);
   

• Billing, claims and payment information (such as claim numbers, account numbers, billing codes, payment cards, financial and banking information, payments made and balance due) ;
  
  and/or
   

• Other personal information such as Social Security numbers, driver’s licenses or state ID numbers, or passport numbers.

   

The information that may have been involved was not the same for every impacted individual. To date, we have not yet seen full medical histories or doctors’ charts appear in the data review. Also, some of this information may have related to guarantors who paid bills for health care services. A guarantor is the person who paid the bill for health care services.

The data review is in its late stages. Change Healthcare has begun mailing written notices via U.S. mail to affected people identified in the ongoing data review for whom Change Healthcare has a sufficient address. Please note, Change Healthcare may not have sufficient addresses for all affected individuals. The mailing process began on July 29, and will continue on a rolling basis.

A dedicated call center is available to offer free credit monitoring and identity theft protections for two years to anyone who believes they may have been impacted. The call center will also include trained clinicians to provide emotional support services. Given the ongoing nature and complexity of the data review, the call center will not be able to provide any details on people’s impacted data at this time. 

The call center can be reached at 1-866-262-5342.

While Change Healthcare is still investigating whether your personal information may have been affected, there are some things you can do to protect yourself:
 

• Be on the lookout and regularly monitor the explanation of benefits statements you receive from your health plan and statements from your health care providers, as well as your bank and credit card statements, credit reports and tax returns, to check for any unfamiliar activity.
  
  
• If you notice any health care services you did not receive listed on an explanation of benefits statement, please contact your health plan or doctor.
  
  
• If you notice any suspicious activity on either your bank or credit card statements or on your tax returns, please immediately contact your financial institution and/or credit card company or relevant agency.
  
  
• If you believe you are the victim of a crime, you can contact your local law enforcement authorities and file a police report.
  

To order your free annual credit report, visit  www.annualcreditreport.com, call toll-free at 877-322-8228, complete the Annual Credit Report Request Form on the U.S. Federal Trade Commission’s (“FTC”) website at www.ftc.gov and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. The three credit bureaus provide free annual credit reports only through their website, toll-free number or request form.

A fraud alert helps protect against the possibility of an identity thief opening new credit accounts in your name. You can place a fraud alert on your credit report by calling any one of the three credit reporting agencies' toll-free fraud numbers. The contact information for the credit reporting agencies can be found at:

A security freeze needs to be placed on your credit file at each credit bureau. To place a security freeze on your credit report, contact the credit reporting agency by phone, mail or secure electronic means and provide proper identification of your identity.

A fraud alert helps protect against the possibility of an identity thief opening new credit accounts in your name. A security freeze helps prevent potential credit grantors from accessing your credit report without your consent.