Update on Change Healthcare cybersecurity incident and paper checks

On April 22, 2024, UnitedHealth Group issued a press release providing an update on the Change Healthcare cybersecurity incident that occurred on Feb. 21, 2024. UnitedHealth Group and its subsidiary, Change Healthcare, are continuing to determine the extent of the data impact resulting from the incident but noted that “based on initial targeted data sampling to date, the company has found files containing protected health information (PHI) or personally identifiable information (PII), which could cover a substantial proportion of people in America.”

The process to determine whose data is impacted is expected to take several months before UnitedHealth Group will be in a position to notify impacted parties (individuals, customers, etc.). While that analysis occurs, UnitedHealth Group is offering immediate credit monitoring and identity protection services, as well as a dedicated contact center to address questions.

We understand that this is a complex situation with more questions than answers at present and we want you to know that resources are available. We encourage you to visit UnitedHealth Group’s website, http://changecybersupport.com/ and/or to reach out to its contact center at 1-866-262-5342 regarding any questions about the Change Healthcare cybersecurity incident. 

Magellan disconnected system access to and from Change Healthcare on Feb. 21, 2024. Our interim claims payment solution – to issue payments previously paid through ECHO Health, Inc. (a Change Healthcare subsidiary) to all providers via paper checks – remains in place. 

Our top priority is to ensure the security of all connections and provider data before restoring electronic transfers through ECHO Health, Inc. You will be notified directly when electronic payment options become available. We will also share relevant information on our website at www.MagellanProvider.com/changehealthcareoutage.

Note: Employee Assistance Program and Pennsylvania HealthChoices payments are not paid through ECHO and therefore are not impacted.