Employers
HHS Signals Continued Focus on Health Plan Privacy and Cybersecurity
Privacy and security are enforcement priorities for government regulators following HHS's restructuring of its Office for Civil Rights.
Security
Recent Healthcare Security Incident
HR departments doing business with UnitedHealth Group (UHG) are probably aware of the cyber incident experienced by the company.
HR departments doing business with UnitedHealth Group (UHG) are probably aware of the cyber incident experienced by the company. On February 21, 2024, UHG identified a cybersecurity threat actor accessing Change Healthcare’s environment. According to UHG, they took immediate action to disconnect systems, with ongoing efforts by security teams, law enforcement, and experts. UHG has announced that they are attempting to mitigate impact on consumers and care providers, with the goal of ensuring access to care and medications.
UHG CEO Andrew Witty expressed commitment to rectify the situation swiftly.
The cyberattack appears contained to Change Healthcare, with no indication of broader impact on UHG systems. Collaboration with cybersecurity firms like Mandiant and Palo Alto Networks, and cloud providers Microsoft and Amazon Web Service, has been utilized to enhance investigation and system protection.
As of now, UHG has stated that there is no evidence of lateral movement beyond Change Healthcare’s environment. UHG continues to restore services, including medical claims software and electronic payments platform, advancing over $2 billion to affected care providers. Assistance programs are available, and educational resources aim to support reconnection to networks and funding assistance utilization.
UHG assures ongoing proactive measures and transparency in addressing this cyber incident. If your group has been impacted, consider reaching out to UHG directly.
Benefit Allocation Systems (BAS) provides online solutions for: Employee Benefits Enrollment; COBRA; Flexible Spending Accounts (FSAs); Health Reimbursement Accounts (HRAs); Leave of Absence Premium Billing (LOA); Affordable Care Act Record Keeping, Compliance & IRS Reporting (ACA); Group Insurance Premium Billing; Property & Casualty Premium Billing; and Payroll Integration.
MyEnroll360 integrates with major insurance carriers for enrollment eligibility management (e.g., Blue Cross, Blue Shield, Aetna, United Health Care, Kaiser, CIGNA and others), and with leading payroll platforms for enrollment deduction management (e.g., Workday, ADP, Paylocity, PayCor, UKG, and others).
This article is for informational purposes only and is not intended as legal, tax, or benefits advice. Readers should not rely on this information for taking (or not taking) any action relating to employment, compliance, or benefits. Always consult with a qualified professional before making decisions based on this content.
Topics
Employers
Risk Assessments Are Only the Beginning: The Importance of Following Through
Federal regulators continue to emphasize that an effective security program requires more than documenting vulnerabilities.
Security
Risk Assessments Are Only the Beginning: The Importance of Following Through
Identifying security vulnerabilities is only the first step — organizations must implement remediation plans and maintain documentation that safeguards are actively in place.