‘I’m not getting paid’: Change Healthcare cyberattack disrupts payroll for providers of all sizes

Healthcare providers across the United States are struggling to get paid following the week-long ransomware outage at a key tech unit of UnitedHealth Group, with some smaller providers saying they are already running low on cash.

Large hospital chains are also locked out of processing payments with some absorbing the upfront costs of being unable to collect, according to the American Hospital Association (AHA), which represents nearly 5,000 hospitals, healthcare systems, networks, and other providers.

Reuters could not gauge the full magnitude of the problem, but six small businesses across the United States—five therapists and one laboratory—said they were unable to process claims and were racking up thousands of dollars in overdue payments.

The problems began last week after hackers gained access to UnitedHealth’s Change Healthcare unit, a vital lynchpin in the complex U.S. system for making and clearing insurance claims. It also affected electronic pharmacy refills and insurance transactions, particularly among independents, with some reverting to paper transactions.

“We are 100% down when it comes to billing right now,” said Phil Seubring, legal director at Forensic Fluids, a Kalamazoo, Michigan, lab that does drug testing for doctors’ offices.

“I’m not getting paid,” said Jenna Wolfson, a Felton, California-based clinical social worker who provides therapy to about 30 clients a week. She said she had about $4,000 in claims in limbo. “This could be catastrophic for me and other small-business mental health practitioners.”

The early impact may hit small offices harder, but providers of all sizes will feel the strain if the outage persists, John Riggi, AHA cybersecurity adviser and a former section chief for the FBI’s cyber division, told Reuters.

“Larger, more well-resourced hospitals that have alternate technologies and sufficient cash reserves will be able to sustain the outage initially and on a longer basis,” he said.

Organizations that suffer high-impact ransomware attacks can take as long as 30 days to restore core services and weeks longer to bring back less important functions, Riggi said.

It was unclear whether other clearinghouses could take on additional claims traffic, and hospitals were anxiously waiting for Change to introduce new workarounds, Riggi added.

Other ransomware attacks last year, including on Clorox and MGM Resorts International shut down key systems, hitting customers and wreaking havoc with suppliers. They took weeks to resolve and hurt both companies financially.

“It really depends on the damage that’s been donr . . . and the resources they have available to put towards recovery,” said Cliff Steinhauer, director of information security and engagement at The National Cybersecurity Alliance.

UnitedHealth said it understood the impact the hack has had on payments but did not immediately respond to requests for comment on how it is affecting hospitals with the issue now a week old.

“While ordinary people can still receive medical care and appointments go on as planned, thousands, if not hundreds of thousands, of providers will see their cash flow grind to a halt,” said Dana Hughes, whose family runs a physical therapy practice in Corvallis, Oregon.

She said she was unable to file claims after her software vendor disconnected from Change Healthcare.

“Workarounds are not readily available, and will involve lengthier processing time,” she said. Going with an alternate clearinghouse would cost her $300-$500, plus time.

A United Health spokesperson on Tuesday said claims submissions had returned to pre-disruption levels, noting that many providers can also use alternative clearinghouses to submit claims.

UnitedHealth initially blamed a “suspected nation-state associated cybersecurity threat actor” for the disruption, but sources told Reuters a criminal gang dubbed “Blackcat” or “ALPHV” was responsible.

—Raphael Satter, Christopher Bing, and Patrick Wingrove, Reuters

(Reporting by Raphael Satter and Christopher Bing in Washington, and Patrick Wingrove in New York; additional reporting by Sriparna Roy in Bengaluru; editing by Caroline Humer and Bill Berkrot)

https://www.fastcompany.com/91047940/change-healthcare-cyberattack-disrupts-providers-payroll?partner=rss&utm_source=rss&utm_medium=feed&utm_campaign=rss+fastcompany&utm_content=rss

Created 1y | Mar 5, 2024, 10:20:02 PM


Login to add comment

Other posts in this group

Figma’s world is growing fast

As recently as 2021, Figma was a one-product company. That product was Figma Design, the dominant tool for creating app and web interfaces. The company’s subsequent addition of offerings such as

May 9, 2025, 1:30:04 PM | Fast company - tech
Gen Z social app Fizz sues Instacart over trademark infringement

A startup marketing to Gen Z on college campuses filed a lawsuit this week alleging that Instacart engaged in federal trademark infringement and unfair competition by naming its new group ordering

May 9, 2025, 11:10:08 AM | Fast company - tech
This new mental health service targets burned-out content creators

Influencers often face more negativity than most people experience in a lifetime—and with that comes a significant mental health toll. Now, a new therapy service has been launched specifically for

May 9, 2025, 11:10:07 AM | Fast company - tech
AI brought a road rage victim ‘back to life’ in court. Experts say it went too far

When Christopher Pelkey was killed in a road rage incident in Arizona, his family was left not only to grieve but also to navigate how to represent him in court. As they prepared to confront his k

May 9, 2025, 11:10:05 AM | Fast company - tech
Gamma aims to free you from ‘death by PowerPoint’—with help from AI

If there’s one thing worse than having to assemble a PowerPoint presentation, it’s being forced to sit through an achingly dull one conducted by someone else.

So what if ther

May 9, 2025, 11:10:04 AM | Fast company - tech
‘His views better have changed since 2012’: How a viral meme account beat the Vatican to the Pope Leo XIV news

White smoke poured from the Sistine Chapel chimney Thursday at 6:07 p.m. local time, signaling the end of the conclave and the election of a new pope to lead the Catholic Church. Cardinal Robert F

May 8, 2025, 11:30:07 PM | Fast company - tech