--- title: Recent Cybersecurity Incident Prompts HIPAA Compliance Review description: The OCR is encouraging HIPAA-covered entities and their associates to review their cybersecurity measures to ensure that health information is protected. image: https://blog.nisbenefits.com/hubfs/blog-headers/cyberattack-hipaa-b.jpg --- ![Recent Cybersecurity Incident Prompts HIPAA Compliance Review](https://blog.nisbenefits.com/hubfs/blog-headers/cyberattack-hipaa-b.jpg) # Recent Cybersecurity Incident Prompts HIPAA Compliance Review - Home - [Employee Benefit News for School, City and County Employers](https://blog.nisbenefits.com) - Recent Cybersecurity Incident Prompts HIPAA Compliance Review [ Mari Wagner ](https://blog.nisbenefits.com/author/mari-wagner) 04/08/2024 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [0 Comments ](https://blog.nisbenefits.com/cybersecurity-incident-hipaa-compliance-review#postComment) 1 Minutes *1.5 minute read* The recent cybersecurity incident affecting Change Healthcare, a unit of UnitedHealth Group, has prompted the U.S. Department of Health and Human Services (HHS) to take action. Due to the significant impact of this cyberattack, HHS' Office for Civil Rights (OCR) is conducting an investigation to determine whether these entities complied with the HIPAA [Privacy](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html), [Security](https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html), and [Breach Notification](https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html) Rules. This includes assessing whether any protected health information (PHI) was compromised. OCR is encouraging HIPAA-covered entities (health plans, health insurance issuers, and health care providers) and their associates to promptly review their cybersecurity measures “with urgency” to ensure that health information is protected. Employers using third-party vendors like third-party administrators (TPAs) and pharmacy benefit managers (PBMs), should verify their cybersecurity measures and ensure secure business associate agreements for electronic PHI.   ## **Health Care Cyberattacks** On Feb. 21, 2024, Change Healthcare, a major health insurance platform in the U.S., was hit by a significant [cyberattack](https://blog.nisbenefits.com/cyberattack-emphasizes-prevention-guidance-need), impacting millions of providers and patients nationwide. The incident, labeled one of the most disruptive attacks in history by cybersecurity experts, highlights the growing threat of ransomware and hacking in healthcare. In the past five years, there has been a 256% increase in hacking-related breaches reported to OCR, with hacking accounting for 79% of large breaches in 2023.   ## **Compliance Resources** To help covered entities and business associates safeguard PHI and protect their systems from cyberattacks, the OCR has provided some helpful tools and resources. - [HIPAA Security Rule Guidance Material](https://www.hhs.gov/hipaa/for-professionals/security/guidance/index.html?language=es) - [OCR VIDEO – How the HIPAA Security Rule Protects Against Cyberattacks](https://www.youtube.com/watch?v=VnbBxxyZLc8) - [OCR Webinar on HIPAA Security Rule Risk Analysis Requirement](https://www.youtube.com/watch?v=hxfxhokzKEU) - [HIPAA Security Risk Assessment Tool](https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool) - [Fact Sheet: Ransomware and HIPAA](https://www.hhs.gov/hipaa/for-professionals/security/guidance/cybersecurity/ransomware-fact-sheet/index.html) Download the [bulletin](https://blog.nisbenefits.com/hubfs/blog-supporting-docs/bulletin-cyberattack-hipaa-compliance-review.pdf) for more details. [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3325505/7d4cc476-ff48-46c5-929f-09612179e77f.png)](https://cta-redirect.hubspot.com/cta/redirect/3325505/7d4cc476-ff48-46c5-929f-09612179e77f) --- #### Tag: [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions) [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) #### Share: - [Follow us on Facebook ](http://www.facebook.com/share.php?u=https://blog.nisbenefits.com/cybersecurity-incident-hipaa-compliance-review) - [Follow us on Twitter ](https://twitter.com/intent/tweet?url=https://blog.nisbenefits.com/cybersecurity-incident-hipaa-compliance-review&text=Recent%20Cybersecurity%20Incident%20Prompts%20HIPAA%20Compliance%20Review) - [Follow us on Linkedin ](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.nisbenefits.com/cybersecurity-incident-hipaa-compliance-review) - [Follow us on Pinterest ](http://pinterest.com/pin/create/button/?url=https://blog.nisbenefits.com/cybersecurity-incident-hipaa-compliance-review&text=Recent%20Cybersecurity%20Incident%20Prompts%20HIPAA%20Compliance%20Reviewdescription=1.5%20minute%20read%20The%20recent%20cybersecurity%20incident%20affecting%20Change%20Healthcare,%20a%20unit%20of%20UnitedHealth%20Group,%20has%20prompted%20the%20U.S.%20Department%20of%20Health%20and[...]&media=https://info.nisbenefits.com/hubfs/blog-headers/cyberattack-hipaa-b.jpg) --- [ #### Report Shows Workers Are Dissatisfied with Health Benefits ##### Previous Post ](https://blog.nisbenefits.com/workers-dissatisfied-with-health-benefits) [#### Family-friendly Benefits in Demand ##### Next Post ](https://blog.nisbenefits.com/family-friendly-benefits) ### Leave a Reply This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ### Category - [Legislative News (1149)](https://blog.nisbenefits.com/topic/aca-other-legislative-news) - [Health Insurance Solutions (504)](https://blog.nisbenefits.com/topic/health-insurance-solutions) - [COVID-19 (209)](https://blog.nisbenefits.com/topic/covid-19) - [Ancillary Benefits (175)](https://blog.nisbenefits.com/topic/ancillary-benefits) - [Mental Health (122)](https://blog.nisbenefits.com/topic/mental-health) ### Popular Posts [ Steve Smith ](https://blog.nisbenefits.com/author/steve-smith) 02/16/2024 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions) [ Understanding Embedded vs. Nonembedded Deductibles ](https://blog.nisbenefits.com/understanding-embedded-nonembedded-deductibles) [ Erin Woulfe ](https://blog.nisbenefits.com/author/erin-woulfe) 02/09/2026 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [ IRS Releases 2027 Health Plan Cost-sharing Limits ](https://blog.nisbenefits.com/2027-health-plan-cost-sharing-limits) [ Valerie Ortiz ](https://blog.nisbenefits.com/author/valerie-ortiz) 02/17/2026 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ The Administrator's Corner](https://blog.nisbenefits.com/topic/the-administrators-corner) [ 4 Employee Wellness Trends You Can’t Ignore in 2026 ](https://blog.nisbenefits.com/2026-employee-wellness-trends) [ Dina Lubben ](https://blog.nisbenefits.com/author/dina-lubben) 11/14/2025 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [ Trump Administration Unveils Plan to Make GLP-1 Drugs Affordable ](https://blog.nisbenefits.com/trump-administration-plan-glp1-drugs-affordable) --- ## Related Posts [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news), [ The Administrator's Corner](https://blog.nisbenefits.com/topic/the-administrators-corner) [ Valerie Ortiz ](https://blog.nisbenefits.com/author/valerie-ortiz) 07 July, 2026 #### [New CMS Report: Healthcare Spending Trends Through 2034](https://blog.nisbenefits.com/healthcare-spending-trends-through-2034) New projections from the U.S. Centers for Medicare and Medicaid Services (CMS) Office of the… [Read More](https://blog.nisbenefits.com/healthcare-spending-trends-through-2034) [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news), [ The Administrator's Corner](https://blog.nisbenefits.com/topic/the-administrators-corner), [ Mental Health](https://blog.nisbenefits.com/topic/mental-health) [ Steve Smith ](https://blog.nisbenefits.com/author/steve-smith) 06 July, 2026 #### [New HHS Rule Expands Catastrophic Coverage Access](https://blog.nisbenefits.com/new-hhs-rule-expands-catastrophic-coverage-access) The U.S. Department of Health and Human Services’ (HHS) Notice of Benefit and Payment Parameters… [Read More](https://blog.nisbenefits.com/new-hhs-rule-expands-catastrophic-coverage-access) [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [ Mari Wagner ](https://blog.nisbenefits.com/author/mari-wagner) 25 June, 2026 #### [Federal Court Blocks Key ACA Exchange Restrictions](https://blog.nisbenefits.com/federal-court-blocks-key-aca-exchange-restrictions) A recent federal court ruling blocked stricter ACA Marketplace eligibility and enrollment… [Read More](https://blog.nisbenefits.com/federal-court-blocks-key-aca-exchange-restrictions)