The Nationwide Neighborhood Pharmacists Affiliation (NCPA) and dozens of suppliers have filed a category motion lawsuit in opposition to UnitedHealth Group (UHG) for losses from the Change Healthcare cyberattack that occurred earlier this yr. The plaintiffs argued that Change Healthcare, which was acquired by UHG in 2022, didn’t take sufficient precautions in opposition to the assault and induced main monetary losses for suppliers.
“UnitedHealth Group and its subsidiaries should be held accountable for his or her lax safety measures and for his or her failure to supply our members with sufficient assist and assurances to alleviate the monetary losses our members suffered. … This breach proves that greater will not be higher and that consolidation usually results in inefficiencies,” stated NCPA CEO B. Douglas Hoey in a press release. “Firms are so huge they can not defend each entry level and can’t reply shortly resulting from inside forms. The very fact [that] points stay unresolved is a testomony thus far. This breach has price our members a big quantity of time and money and it’s nonetheless not resolved months later.”
This comes after quite a few different lawsuits have already been filed for the Change Healthcare assault.
Change Healthcare helps pharmacies and suppliers course of claims. It processes 15 billion transactions yearly, in response to the grievance. In February, it was introduced that ransomware group Blackcat gained entry to Change’s servers, resulting in community outages that affected hundreds of thousands of sufferers and suppliers nationwide. Blackcat obtained delicate info, together with social safety numbers, driver’s licenses, well being info and claims and cost info.
To cease the assault from getting worse, the defendants took some Change methods offline, together with the broadly used Change Healthcare Platform, which is a claims processing service.
“Reliance on Defendants’ Change Platform has created a single level of failure within the U.S. well being system,” the grievance acknowledged. “With out Defendants’ Change Platform, the healthcare trade is immobilized. Sufferers have been caught in prescription purgatory with out entry to their very important medicines. That is particularly disruptive to aged sufferers who’ve a hard and fast revenue and can’t afford medicines with out insurance coverage, in addition to people with power diseases who face life-threatening signs with out their medicine. Defendants’ community outage of the Change Platform jeopardized the well being of hundreds of thousands of Individuals.”
Suppliers have been additionally severely compromised by the hack, and plenty of are nonetheless experiencing challenges in verifying affected person eligibility and protection, submitting claims and billing sufferers. Small and mid-sized practices are particularly struggling, in response to the grievance.
“For over 4 months (and counting), these healthcare practices have acquired little, if any, reimbursement from insurers for affected person visits,” the grievance stated. “With out full reimbursement, small and mid-sized practices can not afford worker payroll, hire/mortgage, and medical provides.”
UnitedHealth Group additionally hasn’t given suppliers “sufficient steering,” the plaintiffs argued. Suppliers must notify their sufferers of non-public info that has been affected by the info breach and in sure instances, must report the breach to the federal authorities. However UnitedHealth Group hasn’t “supplied sufficient accounts concerning the Knowledge Breach that may permit healthcare suppliers to fulfill their obligations,” the grievance alleged.
On account of these points, the plaintiffs made a number of requests for aid, together with that the courtroom “prohibit and forestall Defendants from persevering with to have interaction within the illegal acts, omissions, and practices described herein.” In addition they requested the courtroom to award them “compensatory, consequential, and common damages, together with nominal damages as acceptable, for every depend as allowed by regulation in an quantity to be decided at trial.”
UnitedHealth Group didn’t return a request for remark.
Photograph: AndreyPopov, Getty Pictures