HHS says providers can tap Change to issue data breach notifications after cyberattack

The US Department of Health and Human Services (HHS) has permitted Change Healthcare to inform consumers whose data may have been exposed in a cyber-attack. The decision clears up whose responsibility it is to handle breach reporting and notification. UnitedHealth, owner of Change Healthcare, had offered to carry out such responsibilities, but the affected technology firm has not yet filed a breach report with the HHS.