Addressing Impacts Related to the Cyberattack on Change Healthcare

Relevant to: All Medicare Advantage Organizations, Part D Sponsors, and Medicare-Medicaid Plans

In late February, UnitedHealth Group and its division Optum, Inc., reported that their subsidiary, Change Healthcare, had been the victim of a cyberattack. The effects of this attack have been felt across the health care sector – from pharmacies and hospitals to physician offices – and, importantly, it has impacted some people’s ability to get the care or prescriptions they need. The Centers for Medicare & Medicaid Services (CMS), together with its government partners, has been closely monitoring the impacts of this cyberattack to assess the impact on access to care. We expect Medicare Advantage (MA) organizations and Part D sponsors to continue to provide access to covered benefits without disruption by executing their business continuity plans and removing or relaxing utilization management and timely filing requirements as appropriate. CMS is also encouraging MA organizations to offer advance funding to providers most affected by this cyberattack.

See the full guidance for more information.