Multiple Solutions Incomplete Functionality

Incident Report for WellSky Home Status Page

Resolved

This issue is now resolved. If you believe that you are still experiencing issues related to this, please contact our Support team.

Posted Mar 29, 2024 - 12:40 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: As of March 14, 2024, WellSky is able to reinstate our connections with Change to our CPR+ and CareTend applications. Visit the Client Resource Center to submit a request to reconnect to Change.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/29

Posted Mar 22, 2024 - 16:56 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 8, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/22

Posted Mar 20, 2024 - 17:13 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 8, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/20

Posted Mar 19, 2024 - 17:30 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 8, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/19

Posted Mar 18, 2024 - 17:41 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 8, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/18

Posted Mar 15, 2024 - 17:14 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 8, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/15

Posted Mar 14, 2024 - 15:47 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Wednesday, March 13, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 8, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change reports electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Change expects to reestablish connectivity to its claims network and software in a phased manner beginning the week of March 18, 2024. Because the system will be restored using a phased approach, Change recommends using its iEDI claim submission system. Full restoration will take place once testing has been successfully completed.

* CommonWell: The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. Change reports they are making progress, and they anticipate having CommonWell restored imminently.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/14

Posted Mar 13, 2024 - 17:01 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Friday, March 8, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 7, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change believes electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Changes expects to reestablish connectivity to its claims network and software the week of March 18, 2024. For payers exclusive to the Change clearinghouse, Change recommends using its iEDI claim submission system. As of March 8, 2024, Change states that more than 100 payers are implementing the iEDI solution.

The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. CommonWell is unaware of Change’s timeline for restoring individual systems.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/13

Posted Mar 12, 2024 - 16:47 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Friday, March 8, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 7, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change believes electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Changes expects to reestablish connectivity to its claims network and software the week of March 18, 2024. For payers exclusive to the Change clearinghouse, Change recommends using its iEDI claim submission system. As of March 8, 2024, Change states that more than 100 payers are implementing the iEDI solution.

The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. CommonWell is unaware of Change’s timeline for restoring individual systems.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/12

Posted Mar 11, 2024 - 17:00 CDT

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change briefed WellSky and other partners on Friday, March 8, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

4) Change indicated that safely restoring their systems is their priority.

5) Change is currently offering three temporary funding assistance programs through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

6) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Change also provided the following timeline for system restoration:

* Pharmacy services: Electronic prescribing is live as of March 1, 2024. The claim submission and transmission functionality is also available as of March 7, 2024, although not all connection types have been restored, including the connection type used for some infusion services. The pharmacy network is also back online.

* Payments platform: Change believes electronic payment functionality will be available for connection beginning March 15, 2024.

* Medical claims: Changes expects to reestablish connectivity to its claims network and software the week of March 18, 2024. For payers exclusive to the Change clearinghouse, Change recommends using its iEDI claim submission system. As of March 8, 2024, Change states that more than 100 payers are implementing the iEDI solution.

The Change outage is currently affecting CommonWell, as noted on Change’s status page https://status.changehealthcare.com. CommonWell is one of the national information exchanges used to retrieve Continuity of Care Documents (CCDs). Currently, clients are unable to access CCDs through CommonWell. CommonWell is unaware of Change’s timeline for restoring individual systems.

WellSky is following its security protocols and maintains a robust incident response program. We began our investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. Other WellSky solutions may be impacted by the Change outage. We encourage you to visit the Change status page for updates at https://www.unitedhealthgroup.com/changehealthcarecyberresponse. If you have further questions, please contact the WellSky support team.

Next Update - By End of Business 3/11

Posted Mar 08, 2024 - 17:44 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Tuesday, March 5, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024. Change has processed more than 3 million transactions, with volume increasing daily as more system vendors reconnect.

8) The pharmacy network, which connects pharmacies and PBMs, is in final end-to-end testing with Change’s partners. Change anticipates that its Healthcare Pharmacy network will be back online for the majority of submitters as soon as Thursday.

9) For impacted infusion pharmacies, more pharmacy claims are flowing due to WellSky enabling infusion pharmacies to reroute their business. When the Change network comes back online, any infusion pharmacy unable to leverage the software will once again be able to submit claims.

10) Change believes full recovery of the medical network will take longer than the pharmacy network.

11) For payers exclusive to the Change clearinghouse, Change is now working on a new solution to move the Change gateway claims connection to an Optum electronic data interchange (EDI) claims connection.

12) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

13) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services. WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Next Update - By End of Business 3/8

Posted Mar 07, 2024 - 16:57 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Tuesday, March 5, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024. Change has processed more than 3 million transactions, with volume increasing daily as more system vendors reconnect.

8) The pharmacy network, which connects pharmacies and PBMs, is in final end-to-end testing with Change’s partners. Change anticipates that its Healthcare Pharmacy network will be back online for the majority of submitters as soon as Thursday.

9) For impacted infusion pharmacies, more pharmacy claims are flowing due to WellSky enabling infusion pharmacies to reroute their business. When the Change network comes back online, any infusion pharmacy unable to leverage the software will once again be able to submit claims.

10) Change believes full recovery of the medical network will take longer than the pharmacy network.

11) For payers exclusive to the Change clearinghouse, Change is now working on a new solution to move the Change gateway claims connection to an Optum electronic data interchange (EDI) claims connection.

12) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

13) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services. WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Posted Mar 07, 2024 - 12:13 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Tuesday, March 5, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024. Change has processed more than 3 million transactions, with volume increasing daily as more system vendors reconnect.

8) The pharmacy network, which connects pharmacies and PBMs, is in final end-to-end testing with Change’s partners. Change anticipates that its Healthcare Pharmacy network will be back online for the majority of submitters as soon as Thursday.

9) For impacted infusion pharmacies, more pharmacy claims are flowing due to WellSky enabling infusion pharmacies to reroute their business. When the Change network comes back online, any infusion pharmacy unable to leverage the software will once again be able to submit claims.

10) Change believes full recovery of the medical network will take longer than the pharmacy network.

11) For payers exclusive to the Change clearinghouse, Change is now working on a new solution to move the Change gateway claims connection to an Optum electronic data interchange (EDI) claims connection.

12) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

13) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services. WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Posted Mar 07, 2024 - 09:33 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Tuesday, March 5, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024. Change has processed more than 3 million transactions, with volume increasing daily as more system vendors reconnect.

8) The pharmacy network, which connects pharmacies and PBMs, is in final end-to-end testing with Change’s partners. Change anticipates that its Healthcare Pharmacy network will be back online for the majority of submitters as soon as Thursday.

9) For impacted infusion pharmacies, more pharmacy claims are flowing due to WellSky enabling infusion pharmacies to reroute their business. When the Change network comes back online, any infusion pharmacy unable to leverage the software will once again be able to submit claims.

10) Change believes full recovery of the medical network will take longer than the pharmacy network.

11) For payers exclusive to the Change clearinghouse, Change is now working on a new solution to move the Change gateway claims connection to an Optum electronic data interchange (EDI) claims connection.

12) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

13) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services. WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Posted Mar 06, 2024 - 17:28 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Tuesday, March 5, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024. Change has processed more than 3 million transactions, with volume increasing daily as more system vendors reconnect.

8) The pharmacy network, which connects pharmacies and PBMs, is in final end-to-end testing with Change’s partners. Change anticipates that its Healthcare Pharmacy network will be back online for the majority of submitters as soon as Thursday.

9) For impacted infusion pharmacies, more pharmacy claims are flowing due to WellSky enabling infusion pharmacies to reroute their business. When the Change network comes back online, any infusion pharmacy unable to leverage the software will once again be able to submit claims.

10) Change believes full recovery of the medical network will take longer than the pharmacy network.

11) For payers exclusive to the Change clearinghouse, Change is now working on a new solution to move the Change gateway claims connection to an Optum electronic data interchange (EDI) claims connection.

12) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

13) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services. WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Posted Mar 06, 2024 - 12:11 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Tuesday, March 5, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024. Change has processed more than 3 million transactions, with volume increasing daily as more system vendors reconnect.

8) The pharmacy network, which connects pharmacies and PBMs, is in final end-to-end testing with Change’s partners. Change anticipates that its Healthcare Pharmacy network will be back online for the majority of submitters as soon as Thursday.

9) For impacted infusion pharmacies, more pharmacy claims are flowing due to WellSky enabling infusion pharmacies to reroute their business. When the Change network comes back online, any infusion pharmacy unable to leverage the software will once again be able to submit claims.

10) Change believes full recovery of the medical network will take longer than the pharmacy network.

11) For payers exclusive to the Change clearinghouse, Change is now working on a new solution to move the Change gateway claims connection to an Optum electronic data interchange (EDI) claims connection.

12) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

13) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services. WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

Posted Mar 06, 2024 - 09:14 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 05, 2024 - 18:31 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 05, 2024 - 13:21 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 05, 2024 - 08:06 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 04, 2024 - 17:24 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 04, 2024 - 12:02 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 04, 2024 - 08:37 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change expects to provide additional updates next week and through the status pages identified below.

Change Healthcare briefed WellSky and other partners on Friday, March 1, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity processes.

3) The threat actor has identified themselves as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change confirmed that they have access to their backup systems.

6) Change indicated that safely restoring their systems is their priority.

7) The e-prescribing functionality has been enabled and is live as of Friday, March 1, 2024.

8) The full pharmacy network is the next area of focus, and Change expects to provide further details on the progress they are making on the restoration of that network next week.

9) Change is working on a temporary funding assistance program through Optum Pay. Details are available at https://www.optum.com/temporaryfunding.

10) Updates related to the cyber event can be found at https://www.unitedhealthgroup.com/changehealthcarecyberresponse.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 01, 2024 - 17:12 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 01, 2024 - 12:31 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Mar 01, 2024 - 08:57 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 29, 2024 - 17:32 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 29, 2024 - 12:22 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 29, 2024 - 08:56 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 28, 2024 - 20:25 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 28, 2024 - 11:56 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 28, 2024 - 08:24 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Tuesday, February 27, 2024, regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1) Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.

2) Change severed access to a broad range of its systems following its cybersecurity protocols. A down system does not indicate that the system was compromised.

3) Change has identified the threat actor as AlphV (Blackcat). Law enforcement and cyber incident response partners are involved.

4) Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.

5) Change gave no estimates of when systems will be restored.

6) Change gave no indication whether patient data was compromised.

7) Change indicated that safely restoring their systems is their priority.

8) The Pharmacy Network (e-prescribing) is currently in testing, and Change expects it will return to functionality in the next few days.

9) Change is working on a temporary funding assistance program for certain providers through Optum Pay and will provide more details regarding that program on Friday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and are actively working on technical alternatives including other suppliers of these services.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change. For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Posted Feb 27, 2024 - 17:47 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline for when they expect all of the integrations to be restored, but Change has said that all services will not be restored before Tuesday, February 27. Change’s next significant update is expected February 27.

WellSky is continuing to monitor the situation closely and is actively working on technical alternatives including other suppliers of these services.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was compromised as a result of the Change cyberattack.    

WellSky will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7

Posted Feb 27, 2024 - 15:09 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline on when they expect all of the integrations to be restored, but they have said that all services will not be restored before at least Tuesday, February 27. Change will provide their next significant update on Tuesday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event.    

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7

Next Update - By end of business 2/27/2024

Posted Feb 27, 2024 - 12:33 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline on when they expect all of the integrations to be restored, but they have said that all services will not be restored before at least Tuesday, February 27. Change will provide their next significant update on Tuesday.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event.    

WellSky will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7

Posted Feb 27, 2024 - 08:32 CST

Update

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline on when they expect the integrations to be restored, but they have said that service will not be restored before Monday, February 26.

Change Healthcare briefed WellSky and other partners on Friday afternoon regarding the status of their cybersecurity event. In that briefing, Change provided the following information:

1. Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.
2. Malicious activity was detected in an internal system, not a client-facing production environment.
3. Change severed access to a broad range of its systems following its cyber security playbook. A down system does not indicate that the system was compromised.
4. Law enforcement and cyber incident response partners are involved.
5. As of the briefing, Change had not found evidence of movement of the malicious actor from the Change environment to partner or provider systems.
6. Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.
7. Change gave no estimates of when systems will be restored but indicated that it did not anticipate restoring systems before Monday morning.
8. Change indicated that safely restoring their systems is their priority.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and will provide updates as we learn more from Change.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Next Update - As further information is available from Change Healthcare

Posted Feb 23, 2024 - 19:14 CST

Monitoring

Change Healthcare (Change) publicly announced it is experiencing a cybersecurity event that began on February 21, 2024. Some WellSky clients have integrations with Change, and those integrations have been disconnected. Change has not provided a timeline on when they expect the integrations to be restored.

Change Healthcare briefed WellSky and other partners on Thursday evening regarding the status of their cybersecurity event, which started early on Wednesday, February 21. In that briefing, Change provided the following information:

1. Change became aware of the cybersecurity event in the early morning hours of February 21, 2024.
2. Malicious activity was detected in an internal system, not a client-facing production environment.
3. Change severed access to a broad range of its systems following its cyber security playbook. A down system does not indicate that the system was compromised.
4. Law enforcement and cyber incident response partners are involved.
5. As of the briefing, Change had not found evidence of movement of the malicious actor from the Change environment to partner or provider systems.
6. Some Change systems have already been restored or were not disconnected at all. For details on which Change systems are operating, visit https://status.changehealthcare.com.
7. Change gave no estimates of when systems will be restored but indicated that safely restoring their systems is their priority.

WellSky is following its security protocols and has no reason to believe that any WellSky solution was impacted by the event. We will continue to monitor the situation and will provide updates as we learn more from Change.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7

Next Update - As further information is available from Change Healthcare

Posted Feb 23, 2024 - 13:27 CST

Update

Change Healthcare (Change) has publicly announced that it is experiencing a security incident that began on February 21, 2024. Some WellSky clients have integrations with Change. The security incident impacting Change should not impact data within the WellSky solutions.

Change has announced that it has disconnected its integrations with its partners. WellSky integrations were established via web APIs or a secure FTP site hosted by Change rather than VPN tunnels. As a result, and because of Change’s reported actions, WellSky is confident in the security of data within WellSky solutions.

WellSky maintains a robust incident response program and began its investigation immediately upon becoming aware of this incident and will provide updates as circumstances change.

For further information from Change, please visit their status page at https://status.changehealthcare.com/incidents/hqpjz25fn3n7.

Next Update - As further information is available from Change Healthcare

Posted Feb 22, 2024 - 11:16 CST

Investigating

WellSky is investigating an issue that may impact some clients. For further details and updates, including the final resolution, please visit our status page at https://status.home.wellsky.com. Thank you for your patience while we work to determine the scope and impact of this issue, and to restore full functionality.

Next Update - Posted to the Status Page within 30 minutes
Posted Feb 22, 2024 - 11:14 CST
This incident affected: WellSky Home Health, WellSky Hospice & Palliative, and WellSky Personal Care - US.