The Nationwide Group Pharmacists Affiliation (NCPA) and dozens of suppliers have filed a category motion lawsuit towards UnitedHealth Group (UHG) for losses from the Change Healthcare cyberattack that occurred earlier this 12 months. The plaintiffs argued that Change Healthcare, which was acquired by UHG in 2022, didn’t take sufficient precautions towards the assault and prompted main monetary losses for suppliers.
“UnitedHealth Group and its subsidiaries should be held accountable for his or her lax safety measures and for his or her failure to offer our members with sufficient help and assurances to alleviate the monetary losses our members suffered. … This breach proves that larger just isn’t higher and that consolidation usually results in inefficiencies,” mentioned NCPA CEO B. Douglas Hoey in an announcement. “Corporations are so huge they can not defend each entry level and can’t reply rapidly on account of inside paperwork. The very fact [that] points stay unresolved is a testomony so far. This breach has value our members a big quantity of time and cash and it’s nonetheless not resolved months later.”
This comes after quite a few different lawsuits have already been filed for the Change Healthcare assault.
Change Healthcare helps pharmacies and suppliers course of claims. It processes 15 billion transactions yearly, in accordance with the grievance. In February, it was introduced that ransomware group Blackcat gained entry to Change’s servers, resulting in community outages that affected thousands and thousands of sufferers and suppliers nationwide. Blackcat obtained delicate info, together with social safety numbers, driver’s licenses, well being info and claims and fee info.
To cease the assault from getting worse, the defendants took some Change programs offline, together with the extensively used Change Healthcare Platform, which is a claims processing service.
“Reliance on Defendants’ Change Platform has created a single level of failure within the U.S. well being system,” the grievance said. “With out Defendants’ Change Platform, the healthcare trade is immobilized. Sufferers had been caught in prescription purgatory with out entry to their important drugs. That is particularly disruptive to aged sufferers who’ve a set earnings and can’t afford drugs with out insurance coverage, in addition to people with persistent sicknesses who face life-threatening signs with out their treatment. Defendants’ community outage of the Change Platform jeopardized the well being of thousands and thousands of Individuals.”
Suppliers had been additionally severely compromised by the hack, and lots of are nonetheless experiencing challenges in verifying affected person eligibility and protection, submitting claims and billing sufferers. Small and mid-sized practices are particularly struggling, in accordance with the grievance.
“For over 4 months (and counting), these healthcare practices have obtained little, if any, reimbursement from insurers for affected person visits,” the grievance mentioned. “With out full reimbursement, small and mid-sized practices can’t afford worker payroll, hire/mortgage, and medical provides.”
UnitedHealth Group additionally hasn’t given suppliers “sufficient steering,” the plaintiffs argued. Suppliers need to notify their sufferers of non-public info that has been affected by the info breach and in sure instances, need to report the breach to the federal authorities. However UnitedHealth Group hasn’t “supplied sufficient accounts concerning the Knowledge Breach that might permit healthcare suppliers to fulfill their obligations,” the grievance alleged.
As a consequence of these points, the plaintiffs made a number of requests for aid, together with that the court docket “prohibit and forestall Defendants from persevering with to have interaction within the illegal acts, omissions, and practices described herein.” In addition they requested the court docket to award them “compensatory, consequential, and basic damages, together with nominal damages as applicable, for every rely as allowed by legislation in an quantity to be decided at trial.”
UnitedHealth Group didn’t return a request for remark.
Photograph: AndreyPopov, Getty Pictures