VIVA is contracted to provide certain electronic services on behalf of Change Healthcare.
As part of an ongoing investigation into the ransomware attack and data breach at UnitedHealth Group's Change Healthcare in February 2024, an attack that affected healthcare organizations nationwide, VIVA Health announced that approximately 22,000 customer data was involved in a breach.
VIVA contracts with Change Healthcare to provide certain electronic services on its behalf, including billing and payment processing. Change Healthcare also prints and mails various documents for customers on VIVA's behalf.
Given that the scope of the data breach reported by Change Healthcare is likely to affect a significant portion of the population in the United States, Change Healthcare has spent several months since the security incident identifying the likely affected population. conducted a forensic investigation of certain data and was recently able to begin providing the names of affected individuals to customers.
After learning of the breach from Change Healthcare earlier this year, VIVA immediately took steps to protect customer data during a forensic investigation. Change Healthcare has begun notifying customers about the ransomware breach, and VIVA customers have been or are in the process of being notified. A notification letter from Change Healthcare will provide information about the data breach, the types of data that may be involved, and resources individuals can use to protect themselves, including instructions to sign up for two years of free identity protection and credit monitoring. Information will be provided.
Change Healthcare's investigation into this incident continues and may lead to the identification of additional VIVA customers involved in the breach. If so, those customers will also receive a notification letter from Change Healthcare.
Change Healthcare was unable to provide VIVA with precise data about each affected individual, but demographic information (first and last name, address, telephone number, date of birth, health insurance ID number, and in rare cases Social Security) is common. Number — the target for this type of incident.
As with any data breach incident, affected individuals should continue to be vigilant and report any statement of benefits received from their health insurance, statements from their healthcare provider, bank or credit card statements, credit report or tax return. We recommend that you monitor and check the book descriptions regularly. Unfamiliar activities. If you notice that you are not receiving medical services that are not described on your benefit statement, please contact your health plan or doctor. If you notice suspicious activity on your bank or credit card statement or tax return, contact your financial institution, credit card company, or other relevant authority immediately.
The U.S. Department of Health and Human Services publishes information about data breaches here.
Change Healthcare has established a dedicated call center to provide additional resources and information, including two years of free identity theft protection and assistance enrolling in credit monitoring services. Our toll-free call center number is 1-866-262-5342 and is available Monday through Friday from 8 a.m. to 8 p.m. CST. For more information, please visit www.changecybersupport.com.