UnitedHealth now says 190 million impacted by 2024 data breach

vaxvms

https://www.bleepingcomputer.com/news/security/unitedhealth-now-says-190-million-impacted-by-2024-data-breach/

UnitedHealth has revealed that 190 million Americans had their personal and healthcare data stolen in the Change Healthcare ransomware attack, nearly doubling the previously disclosed figure.
This stolen data includes patients' health insurance information, medical records, billing and payment information, and sensitive personal information, such as phone numbers, addresses, and, in some cases, Social Security Numbers and government ID numbers.

GrumpyCanadian

vaxvms This one really is the data breach that keeps on giving. Was there ever any news of fines or firings over this? Surely there must be something here that qualifies as a violation of their responsibilities under HIPAA. Then again, I wouldn't be too surprised if HIPAA went out with the bath water in the current climate.

px_eliezer_

GrumpyCanadian

The HHS OCR* is reportedly (still) investigating.
https://www.hhs.gov/hipaa/for-professionals/special-topics/change-healthcare-cybersecurity-incident-frequently-asked-questions/index.html
October 24, 2024

*(Office for Civil Rights within the U.S. Department of Health and Human Services----This is the primary office for HIPAA enforcement).

Of course many changes are afoot in these agencies right now, which might result in some readjustments....