NE Washington News

House Energy and Commerce Health Subcommittee Chair Brett Guthrie (R-KY) addressed the issue of health care cybersecurity during a subcommittee hearing titled "Examining Health Sector Cybersecurity in the Wake of the Change Healthcare Attack." Guthrie emphasized the importance of the matter, stating, “Today we will hear from industry experts and health care providers, large and small, about our health care cybersecurity. This is especially important considering recent events.”

Guthrie highlighted the significant impact of the ransomware attack on Change Healthcare, a subsidiary of UnitedHealth, which caused disruptions in the health care industry. He mentioned that the attack led to UnitedHealth Group taking key systems offline, affecting claims processing, payment, billing, and eligibility verifications. The aftermath of the attack resulted in patients facing challenges such as lack of access to medications and increased out-of-pocket costs, while providers faced payment delays.

The congressman shared a personal anecdote, revealing, “His practice is losing staff because they can’t make payroll while systems are still getting back online. I am concerned that we still don’t know how much sensitive information may have been compromised.” Guthrie expressed his commitment to work with the Department of Health and Human Services and private sector partners to assess the damage caused by the ransomware attack.

Guthrie also highlighted the rise in cyber attacks targeting the health care sector in recent years. He mentioned the alarming statistics of data breaches and ransomware attacks reported to HHS, emphasizing the financial impact on organizations. Guthrie pointed out the need for stronger measures to prevent such attacks, citing the federal government's response to cyber threats as lagging behind the seriousness of the issue.

Regarding the federal government's role in enhancing cybersecurity, Guthrie mentioned the steps outlined in the National Strategy document and the four-step plan issued by HHS to strengthen health care cyber defenses. He emphasized the importance of finding the right balance between incentives, penalties, and accountability in addressing cybersecurity challenges. While acknowledging the administration's efforts, Guthrie raised concerns about the timeliness of these actions and urged proactive measures to safeguard the health care system and protect patient privacy.

In conclusion, Guthrie stressed the importance of ensuring that the health care system becomes a global leader in cybersecurity to safeguard patient safety and privacy. The congressman's remarks underscore the urgency of implementing robust cybersecurity measures to prevent future attacks and mitigate potential risks in the health care sector.