Attorney General Aaron M. Frey has issued consumer protection reminders and highlighted the availability of free credit monitoring and identity theft protection services following a data breach at Change Healthcare in February. In April, Frey joined other attorneys general in urging UnitedHealth Group, Inc., the parent company of Change Healthcare, to take stronger measures to protect those affected by the breach.
Change Healthcare, a subsidiary of UnitedHealth, serves as the largest electronic data clearinghouse in the nation. Its infrastructure supports numerous providers, pharmacies, and insurers in verifying insurance details, pre-authorizing procedures or services, exchanging insurance claim data, and performing other essential administrative tasks. The cyberattack disrupted operations for thousands of medical offices and pharmacies while exposing sensitive health and personal data on the dark web.
The exact number of affected individuals remains unknown; however, Change Healthcare estimates that up to one-third of Americans could be impacted. Typically, Maine residents receive individualized notifications if their data is compromised in such breaches. However, Change Healthcare has not yet provided such notices.
"Consumers cannot afford to wait when the nation’s largest electronic data clearinghouse is unable to protect sensitive personal data and then is unable to notify affected individuals," said Attorney General Frey. "If consumers believe their personal data may have been exposed in this breach, I strongly encourage them to sign up for the credit monitoring being offered."
Change Healthcare offers all Maine residents who believe they may have been impacted free credit monitoring and identity theft protections for two years. Although specific details about whether an individual's data was compromised are unavailable through the dedicated website and call center, these resources can assist consumers in setting up protections.
Given the significant impact and lack of individual notifications from Change Healthcare thus far, it is recommended that everyone assume their information may have been involved. Consumers should watch for signs indicating misuse of their medical information.
For those concerned about potential exposure but preferring not to use Change Healthcare's resources, freezing credit is an alternative measure. A credit freeze prevents creditors from accessing an individual's credit reports without approval via a PIN provided by each bureau (Experian, Equifax, TransUnion). This can prevent identity thieves from opening new loans or credit cards under someone else's name.
Joining AG Frey in disseminating these consumer protection resources is a bipartisan group of attorneys general from across the country.
---