UnitedHealth’s Absence at Change Healthcare Cybersecurity Hearing Raises Alarms for Patient Access and Data Security

In a joint statement released on Friday, Energy and Commerce Committee Chair Cathy McMorris Rodgers (R-Wash.) and oversight subcommittee chair Morgan Griffith (R-Va.) expressed concerns about the ongoing fallout of the Change Healthcare hack. They highlighted the financial struggles faced by individuals and smaller providers following the cyberattack, which has jeopardized critical access for patients. The lawmakers also noted their disappointment that UnitedHealth did not participate in the recent Health Subcommittee hearing on cybersecurity.

The upcoming May 1 hearing at the House Energy and Commerce oversight subcommittee will be significant as it will be the first time Witty will appear in the House. Change Healthcare is the largest medical claims processor in the country, acting as a central data hub for health insurers and providers. The cyberattack in February had widespread repercussions across the healthcare industry, disrupting operations at various clinics and hospitals while billions of dollars in payments to providers were delayed. Despite efforts, Change Healthcare has still not fully recovered from the attack.

During the recent hearing, lawmakers expressed frustration over the absence of representation from United, which acquired Change Healthcare in 2022. There were discussions about the possibility of issuing a subpoena to compel their attendance. Witty is anticipated to testify soon before the Senate Finance Committee, shedding light on the events leading up to and following the cyberattack. This testimony will provide valuable insights into the cybersecurity breaches and their impact on the healthcare sector.

In an effort to address these concerns, McMorris Rodgers and Griffith have called on Congress to take action to strengthen cybersecurity measures in