Required notice: Change Healthcare privacy breach

Change Healthcare, owned by United HealthGroup, has formally declared a HIPAA privacy breach and intends to notify individuals whose personal information has been compromised.

August 19, 2024

Change Healthcare, a company that connects doctors’ offices, pharmacies, and hospitals with Blue Cross and Blue Shield of Minnesota (Blue Cross) and other health insurers, experienced a criminal cyberattack in early 2024. 

In July 2024, Change formally declared a HIPAA privacy breach and began informing its customers (health care providers and insurers, including other Blue Cross plans) about its plan to manage the notification of individuals whose personal information has been impacted. 

Soon after, Blue Cross received a notification from Change that some individual member data may have been impacted due to information sharing by entities that work directly with Change, including providers, pharmacies, other insurers or healthcare entities. 

Blue Cross does not have any additional information regarding the scope or detail of the breached data. Please contact Change Healthcare at 1-866-262-5342 with any questions or concerns.

Learn more about the privacy breach