Jun 25, 2024
On February 21, 2024, Aetna's vendor Change Healthcare disclosed a cyber security incident that had ramifications across the health care industry. Change Healthcare is a widely used provider of health care billing and data systems.
On June 21, Aetna received notice from Change Healthcare that some Aetna member protected health information was compromised. Because Change Healthcare's forensic review is ongoing, there are several things Aetna doesn't know, including how many total members are impacted as well as which specific members or clients.
Change Healthcare will provide notice to all impacted individuals as well as free credit monitoring. Change Healthcare has published a website with additional information about their notification plans which may be helpful to you. Aetna's current understanding is that notices will be sent on a rolling basis beginning next month.
Given the unique role Change Healthcare plays in the health care industry, an individual’s information may have been provided to Change Healthcare by multiple entities, including health care providers, Aetna or other health plans. Change Healthcare plans to send one letter to each impacted individual which will identify all the entities on whose behalf they are providing notice.
Aetna will provide more information as it becomes available.
