NE Washington News

House Energy and Commerce Committee Chair Cathy McMorris Rodgers (R-WA) opened a Health Subcommittee hearing focused on cybersecurity in health care and the recent Change Healthcare cyberattack. Rodgers expressed disappointment that UnitedHealth Group did not testify but noted they would do so in the future. She emphasized the importance of discussing the resiliency of the health care sector and learning from the recent cyberattack.

Regarding the Change Healthcare cyberattack, Rodgers stated, “The Change Healthcare cyberattack is just the most recent case of ransomware targeting our health care system.” She highlighted the ongoing impact of the attack on providers and organizations nationwide and the concerns raised by various stakeholders.

Rodgers raised important questions about the cyberattack, including how it gained entry to the system and how health care entities can enhance their protection. She also questioned the reliance of health care providers on third parties and the potential negative impacts of such dependencies on the U.S. health care system.

In the context of the health care system, Rodgers emphasized the significance of safeguarding patient data and the need for continuous examination of health care cybersecurity. She pointed out the roles of various offices and agencies within HHS in responding to cyber threats and highlighted the potential widespread consequences of successful cyberattacks in a more consolidated health care system.

Rodgers highlighted the Energy and Commerce Committee's efforts in addressing cybersecurity issues across different sectors, including legislative actions aimed at enhancing preparedness and response to cyber threats in the health care industry. She emphasized the importance of learning from the Change Healthcare cyberattack and exploring ways to prevent future disruptions in patient care due to cyber threats.

In conclusion, Rodgers expressed her hope that the hearing would provide valuable insights into the recent cyberattack and its response, emphasizing the importance of proactive measures to protect the health care system from cyber threats.