HHS Announces Actions on Change Healthcare Cyberattack

Today, the Department of Health and Human Services (HHS) announced new steps it is taking to respond to the Change Healthcare cyberattack. ASHP is pleased to see HHS addressing the attack, including some of the items ASHP flagged in its letter last week asking HHS to take additional action.

HHS noted it would continue to communicate with providers and expects payers to work with providers until the attack is fully resolved. Additionally, HHS outlined a number of actions it will take in the coming days, including:

• Instructing the Medicare Administrative Contractors (MACs) to expedite new electronic data interchange enrollment and encouraging “other payers…to waive or expedite solutions for this requirement.”
• Issuing guidance to Medicare Advantage and Part D sponsors “encouraging them to remove or relax prior authorization, other utilization management, and timely filing requirements” until the system is restored.
• Encouraging plans, including Medicare Advantage, Children’s Health Insurance Plans, and Medicaid “to offer advance funding to providers most affected by this cyberattack.”
• Instructing MACs that they must accept paper claims from providers impacted by the cyberattack.

ASHP is committed to assisting members in managing the fallout from the cyberattack and seeking solutions to protect patients and providers in the future. We will continue to update members as new information becomes available. We encourage members to direct questions and concerns to Jillanne Schulte Wall at [email protected].