1. Home
  2. Advocacy
  3. Latest News and Practice Data
  4. Cyberattacks and Cybersecurity in Health Care

Cyberattacks and Cybersecurity in Health Care

According to the Department of Health and Human Services (HHS), the health care sector is particularly vulnerable to cybersecurity risks. Health care facilities are attractive targets for cyber criminals in light of their size, technological dependence, sensitive data, and unique vulnerability to disruptions. And, cyber incidents in health care are on the rise.

Ascension Cyberattack

Ascension, which operates 140 hospitals in 19 states, reported on May 9 a cyberattack. Electronic patient charts were among the systems affected. MyChart — a portal for patients to see their records and message providers — was unavailable, along with some phone services and systems for ordering tests, procedures, and medications.

Ascension will be posting additional updates and regional information regarding cybersecurity here: https://about.ascension.org/cybersecurity-event.

The CAP is also monitoring the impact of the attack on practices utilizing the Pathologists Quality Registry. After the Change Healthcare cyberattack earlier this year, the Centers for Medicare & Medicaid Services (CMS) added an option to cite the cyberattack when requesting the 2024 Merit-based Incentive Payment System (MIPS) Extreme and Uncontrollable Circumstances (EUC) hardship exception. The CAP wants our practices to know that this is a viable option, and they should take advantage of the EUC hardship application if they have been impacted by the cyberattack and are unable to access their data for MIPS reporting . The 2024 MIPS EUC portal is now open, and physicians have until December 31, 2024, to file a hardship application and avoid a 2026 MIPS negative payment adjustment. For more information on the 2024 EUC hardship application please visit the CMS webpage.

Change Healthcare Cyberattack

On February 21, Change Healthcare, owned by UnitedHealth Group, experienced a cyberattack that has significantly impacted health care operations across the country. Pathologists have reported disruptions in claims processing, cash flow constraints, and other difficulties in daily practice operations. Below are the latest updates and resources to assist pathologists in managing the fallout.

Resources

News and Other Updates