Ninety-four percent of hospitals are experiencing a financial impact from the Change Healthcare cyberattack with more than half reporting “significant or serious” impact, according to results from an AHA survey released today. The survey included responses from about 1,000 hospitals from March 9-12. More than 80% of hospitals said the cyberattack has affected their cash flow, and of those nearly 60% report that the impact to revenue is $1 million per day or more. In addition, the survey found that 74% of hospitals reported impacts to direct patient care as a result of the cyberattack. While hospitals are implementing workarounds to mitigate the patient impact and address the affected Change Healthcare systems, most hospitals are reporting that these workarounds are very labor intensive and costly.

“These survey findings are another irrefutable reminder that the impact of this cyberattack is far reaching and far from over,” said AHA President and CEO Rick Pollack. “When nearly every hospital says they are experiencing a financial loss and half of those say it’s ‘significant or serious,’ with no immediate end in sight, then the debate about whether we need to help them should be over. We continue to call on Congress and the Administration to take additional actions now to support providers as they deal with significant fallout from this historic attack. We also need UnitedHealth Group and commercial payers to step up and support patients and providers on the front lines by waiving prior authorization and timely filing requirements, as well as advancing payments that will allow providers to continue providing 24/7 care to communities.”

Headline
Health care and public health was the top sector targeted for cyberthreats in 2025, according to the FBI’s latest annual report on internet crimes. There were…
Headline
The Cybersecurity and Infrastructure Security Agency released an alert March 27 on a vulnerability in F5 BIG-IP Access Policy Manager software that is being…
Headline
The FBI released an alert March 20 warning of a technique used by cyber actors working on behalf of the Iranian government to conduct malicious cyber activity…
Headline
The Cybersecurity and Infrastructure Security Agency March 18 released an alert urging U.S. organizations to harden their endpoint management systems following…
Headline
The Health Sector Coordinating Council Cyber Working Group and Health-ISAC (Information Sharing and Analysis Center) will host a joint cybersecurity event July…
Headline
Stryker, a medical technology company that provides services and products for hospitals, was disrupted globally by a cyberattack, the company announced March…