Update - Enterprise Imaging customer environments (on premise and cloud-based) were not affected by the cyberattack and are fully operational and available for use. In an abundance of caution, we proactively severed connectivity and access to various internal infrastructure components and operational systems. This action, while essential from a cyber-security perspective, has temporarily affected some operational processes and tools.
Our support teams remain available to resolve any customer issues with the same level of customer service you have come to expect, however it is important to share that the support teams will not have immediate access to all their standard tools as we rebuild those tools and their access in a safe and secure way. We continue to work aggressively on the restoration of our support tools and implementation services. Installation of new solutions and upgrades will be temporarily delayed as we focus on rebuilding these systems and tools. Again, all Change Healthcare Enterprise Imaging on-premise and cloud-based Radiology, Cardiology, and Workflow solutions remain secure and can be used without any concerns.
Apr 11, 2024 - 12:39 PDT
Monitoring - March 13, 2024
Change Healthcare has experienced a cybersecurity issue. Once we became aware of the outside threat and in the interest of protecting our partners and patients, we took immediate action to disconnect Change Healthcare’s systems to prevent further impact. This action was taken so our customers and partners do not need to. Our security team, along with law enforcement and independent experts, are addressing the matter.
We have a high level of confidence Optum, UnitedHealthcare and UnitedHealth Group systems have not been affected by this issue. We see no evidence of compromise beyond the scope of the Change Healthcare applications. We regularly scan those environments and continue to validate that they were not impacted. If we had any reservation about those environments, we would have ceased services immediately. As a result, all solutions available to customers today have been deemed secure and appropriate for continued use.
The impacted Change Healthcare environment was, and remains, firewalled away from the rest of the company. It follows that we have no reason to believe that verified emails from "Optum.com" are affected by this issue.
Change Healthcare Enterprise Imaging solutions remain operational and available to customers. This includes our on premise and Cloud-hosted Radiology, Cardiology and Workflow solutions and our isolated, HiTrust-certified and SOC2-compliant, Cloud-native Stratus Imaging solutions. We have no concerns about the production systems currently available to you.
Enterprise Imaging is working on multiple approaches to restore service and support operations and will not take any shortcuts or take any risks as we bring our systems back online. We will continue to be proactive and aggressive with all our systems and if we suspect any issue with the system, we will immediately take action and disconnect. Patient care is our top priority, and we have implemented multiple workarounds to ensure that mission critical service and support operations are available to our customers.
Sincerely,
Tracy Byers
Division CEO
Optum Insight | Enterprise Imaging
Steven Martin
Chief Security Officer
Optum Technology
Mar 14, 2024 - 12:49 PDT