Change Healthcare, a health payment processor hit by a crippling cyberattack in February, is under investigation by the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR).
In an open letter intended for hospitals and healthcare offices published Wednesday, OCR Director Melanie Fontes Rainer said the agency was investigating whether Change Healthcare violated Health Insurance Portability and Accountability Act (HIPAA) rules by not following breach notification requirements and properly safeguarding patient information.
