Virginia Lawmaker Introduces Bill to Improve Health Care Payments After Cyberattacks

Sen. Mark R. Warner, D-Va., has introduced the Health Care Cybersecurity Improvement Act of 2024, a bill that would advance and accelerate payments to health care providers affected by a cyberattack.

The Act will modify several sections of the existing Medicare Hospital Accelerated Payment Program and the Medicare Part B Advance Payment Program, including ensuring that the affected provider meets minimum cybersecurity standards set by the Secretary of the Department of Health and Human Services, Warner’s office said.

Warner introduced the bill after a ransomware attack targeted payment cycle management provider Change Healthcare, resulting in paralyzed billing schedules for providers nationwide.

The BlackCat/ALPHV ransomware group claimed responsibility for the attack, which ended after UHG paid 350 bitcoins, worth $22 million, to the attackers.

After the cyber incident, the Department of Health and Human Services sent UnitedHealth Group, Change Healthcare’s parent company, a letter encouraging it to accelerate programs aimed at mitigating the impact of a ransomware attack on its claims processing and payments platform.