Nebraska Attorney General Mike Gilgers filed suit against Change Healthcare, owned by UnitedHealth Group (UHG), following a February ransomware attack that compromised the personal data of about 100 million Americans, including 575,000 Nebraskans.
The attack disabled the medical payment processing system, resulting in the inability to provide medical services, delays in dispensing prescriptions, and significant financial losses. The 29-page complaint alleges that Change Healthcare failed to implement adequate cybersecurity measures and violated the Nebraska Consumer Protection Act and the Data Security Act. Nebraska Consumer Protection and Data Security Act by failing to take adequate cybersecurity measures.
Gilgers emphasized the scale of the attack, noting that larger health systems were losing more than $10 million a day to the simple breach. The lawsuit alleges that the company failed to notify all victims in a timely manner, leaving Nebraskans vulnerable to fraud. Change Healthcare defends its actions, citing the complexity of the data and the ongoing investigation, but the state Attorney General is seeking compensation, fines and enhanced data security measures.
Conclusion This lawsuit demonstrates the importance of robust cybersecurity to protect sensitive medical information. Nebraska’s lawsuit against Change Healthcare aims to restore trust in the health care system while addressing the financial and operational problems caused by the attack.