Ninety-four percent of hospitals are experiencing a financial impact from the Change Healthcare cyberattack with more than half reporting “significant or serious” impact, according to results from an AHA survey released today. The survey included responses from about 1,000 hospitals from March 9-12. More than 80% of hospitals said the cyberattack has affected their cash flow, and of those nearly 60% report that the impact to revenue is $1 million per day or more. In addition, the survey found that 74% of hospitals reported impacts to direct patient care as a result of the cyberattack. While hospitals are implementing workarounds to mitigate the patient impact and address the affected Change Healthcare systems, most hospitals are reporting that these workarounds are very labor intensive and costly.

“These survey findings are another irrefutable reminder that the impact of this cyberattack is far reaching and far from over,” said AHA President and CEO Rick Pollack. “When nearly every hospital says they are experiencing a financial loss and half of those say it’s ‘significant or serious,’ with no immediate end in sight, then the debate about whether we need to help them should be over. We continue to call on Congress and the Administration to take additional actions now to support providers as they deal with significant fallout from this historic attack. We also need UnitedHealth Group and commercial payers to step up and support patients and providers on the front lines by waiving prior authorization and timely filing requirements, as well as advancing payments that will allow providers to continue providing 24/7 care to communities.”

Related News Articles

Headline
U.S. and international agencies Jan. 14 released guidance on secure connectivity for operational technology environments. Examples of OT environments in health…
Headline
The AHA Jan. 14 expressed support for the Rural Hospital Cybersecurity Enhancement Act (S. 2169), legislation that would direct the Department of Health and…
Headline
The FBI Jan. 8 released an alert on evolving threat tactics by Kimsuky, a North Korean state-sponsored cyber threat group. As of last year, the group…
Headline
The Cybersecurity and Infrastructure Security Agency Dec. 11 released an update to its voluntary Cybersecurity Performance Goals, which includes measurable…
Headline
U.S. and international agencies are warning of potential cyberattacks on health care and other critical infrastructure from state-sponsored cyber actors in…
Headline
A critical, unauthenticated remote code execution vulnerability known as React2Shell has been added to the Cybersecurity and Infrastructure Security Agency’s…