change healthcare logo

Change Healthcare Cyberattack Support

Change Healthcare is providing support for people concerned about their personal data due to the criminal cyberattack on Change Healthcare systems.

Review the substitute notice here.

What happened?

On February 21, 2024, Change Healthcare became aware of deployment of ransomware in its computer system. Once discovered, Change Healthcare quickly took steps to stop the activity, disconnected and turned off systems to prevent further impact, began an investigation and contacted law enforcement. Change Healthcare’s security team worked around the clock with several top security experts to address the matter and understand what happened. Change Healthcare has not identified evidence this incident spread beyond Change Healthcare.  

Change Healthcare retained leading cybersecurity and data analysis experts to assist in the investigation, which began on February 21, 2024. On March 7, 2024, Change Healthcare was able to confirm that a substantial quantity of data had been exfiltrated from its environment between February 17, 2024, and February 20, 2024. On March 13, 2024, Change Healthcare obtained a dataset of exfiltrated files that was safe to investigate and began preliminary targeted analysis. On April 22, 2024, following analysis, Change Healthcare publicly confirmed the impacted data could cover a substantial proportion of people in America.

On July 29, 2024, Change Healthcare began mailing written notices to individuals affected by the incident. Data analysis continues, and CHC is following impacted customers’ directions regarding handling notices on those customers’ behalf. Change Healthcare is committed to notifying potentially impacted individuals as quickly as possible, on a rolling basis, given the volume and complexity of the data involved.

What can you do now?

 

Get free credit monitoring with IDX

If you are concerned that your information may have been impacted by this incident, you can enroll in two years of complimentary credit monitoring and identity protection services. Change Healthcare is paying for the cost of these services for two years.   You can sign up by clicking "Enroll now" or by calling 1-888-846-4705.

 

Check in on your health care information

  • Be on the lookout and regularly monitor your explanation of benefits statements from your health plan and health care providers, as well as financial documents, to check for any unfamiliar activity. 

  • If you notice any health care services you did not receive listed on an explanation of benefits statement, contact your health plan or doctor. 

  • If you notice any suspicious activity on bank, credit card statements or tax returns, contact your financial institution.

  • If you believe you are the victim of a crime, contact local law enforcement authorities and file a police report.

 

Frequently asked questions

Contact us



For additional support related to the cyberattack, click to call the number below. Notice letters sent to individuals by Change Healthcare describe the information potentially involved, even if those data elements were not impacted as to the recipient. 

clock icon+1-866-262-5342