What We Learned from the Change Healthcare Cyberattack

Ascension, a nonprofit health care operator, fell victim to a ransomware attack in May 2024, illustrating the health industry’s increasing vulnerability to cyber threats. Experts suggest that consolidation in health care, such as the acquisition of Change Healthcare by UnitedHealth Group, increases the risk of such large-scale attacks. In response to the attacks, there are calls for a national cybersecurity strategy that incorporates the entire sector, including smaller and rural providers, to protect against systemic vulnerabilities.