Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Statement by BakerHostetler Chair Paul Schmidt on Passing of Partner David Rivkin, Jr.

Nationwide CTA Injunction Is Back in Effect. What Happens Now?

Alexander Reid Quoted About OpenAI in New York Times and Bloomberg’s ‘Money Stuff’ Newsletter

Robb Adkins, Rachel Ofori Publish Article on White-Collar Defense After Catastrophic Incidents

BakerHostetler is closely monitoring imminent cybersecurity threats to healthcare revenue cycle management personnel and vendors.

core/paragraph

Most recently, Change Healthcare (CHC), a healthcare technology and business management vendor for many healthcare systems and providers, announced that it experienced a data security incident.

Hundreds of healthcare providers throughout the country utilize CHC for eligibility clearance and revenue cycle management, and this incident has disrupted the availability of some of its services.

In addition to service disruptions, which may have financial implications for organizations, this incident could have Health Insurance Portability and Accountability Act (HIPAA) breach notification implications for healthcare providers. Depending on the services healthcare providers receive from CHC, CHC may act as a clearinghouse (in and of itself&nbsp;a HIPAA-covered entity) or a business associate of the healthcare entities.&nbsp;In both capacities, CHC collects a large amount of protected health information as part of the services it provides. If that data was accessed or acquired as a result of this incident, there could be a <em>very</em> large patient notification, and that notice responsibility may fall on healthcare systems and providers if CHC is acting as a business associate. &nbsp;

In addition to the CHC incident, BakerHostetler is working with a number of healthcare organizations that have experienced email phishing and other incidents targeting their healthcare revenue cycle workforce and vendors.

Many healthcare systems and providers have already reached out to BakerHostetler about these types of incidents, and we have a team of highly experienced incident response attorneys ready to assist healthcare (and other) clients with responding to vendor and cybersecurity incidents.

Imminent Cybersecurity Threats to Healthcare Revenue Cycle Management

Featured Insights

Related Services

Featured Insights