One Minnesota patient shared with the Star Tribune a copy of a notice from the company dated Aug. 5. Minnetonka-based UnitedHealth Group says it also sent letters in late July.
The company has not said exactly how many letters are being sent, although Chief Executive Andrew Witty told congressional committees in May that data from one out of three Americans could have been involved in the hack.
“We are sorry to tell you about a privacy event,” says the letter from Change Healthcare, the subsidiary that suffered the cyber attack. “We work with many doctors, health insurance plans, and other health companies to help provide health services or benefits. This event may have involved your data.”
UnitedHealth Group says it has repaired and restored systems at Change Healthcare while improving security.
The cyber attack, which occurred in February, was hugely disruptive to the nation’s health care system because UnitedHealth Group had to shut down a widely used clearinghouse for processing claims in order to contain the threat. Health care providers, in turn, struggled for weeks and in some cases months to submit claims for reimbursement.
“Notice of Data Breach” documents being received by patients say the information that might have been seen and taken includes name, address, date of birth, phone number and email.
Hackers might also have accessed one or more items from several categories, the notice says, including health insurance data, health data, billing/claims data and other personal data, such as Social Security numbers.
“The data that may have been seen and taken was not the same for everyone,” the notice states. “Some of this data may be about the person who paid the bill for health care services.”
The breach occurred because a cyber criminal accessed the company’s computer system without permission, according to the letter.
UnitedHealth Group is offering free credit monitoring and identity theft protection for two years. The letter says people with questions and concerns can phone the company at 866-262-5342.
©2024 StarTribune, Distributed by Tribune Content Agency, LLC.
