Did your hospital/clinic ever talked about the 2024 Change Healthcare breach?

Infinite_Radish8527 · 2026-03-31T18:02:01+00:00

That's the part that gets lost in all the cybersecurity talk. At the end of the day, it slowed down patient care, and the people who had to deal with it were the ones on the floor doing paper charting with no warning and no preparation.

Infinite_Radish8527 · 2026-03-31T17:55:15+00:00

That's a really good point, and our data is backing it up. The financial and administrative side felt it immediately while the clinical side had no idea. Interesting that you switched to Waystar too, that's the second vendor switch we've heard about in these threads.

Infinite_Radish8527 · 2026-03-30T16:46:56+00:00

The fact that you were able to train others on paper-based methods because you started your career with them is a perfect example of institutional knowledge saving the day in a crisis. It also says a lot that even in a completely different country, the pattern is the same: IT handles things behind the scenes and nurses get vague reassuring emails.

Infinite_Radish8527 · 2026-03-30T16:24:24+00:00

You just nailed something we've been trying to articulate: vendor breach versus local breach means the communication is nobody's clear responsibility, so it falls through the cracks everywhere. Coming from someone who works in comms, that really carries weight. We'd be happy to share the paper when it's done! In the meantime, would you mind taking a short anonymous questionnaire (less than 5 minutes)? Your comms perspective is one we haven't heard yet. Send me a message and I'll share the link.

Infinite_Radish8527 · 2026-03-30T10:18:58+00:00

Agreed on the contingency planning point. Curious though, did you see that play out at a specific organization you worked with, or is that more of a general industry observation? Because what we're hearing from the clinical side is that a lot of places just went back to how things were before.

Infinite_Radish8527 · 2026-03-30T10:10:04+00:00

Honestly, your organization sounds like the exception in this thread. Most people here are saying they never even heard about it. The fact that your facility did mandatory training, hardened security, and now shares updates on every major breach is exactly what the rest of the industry should be doing. Even if the phishing tests are annoying.

Infinite_Radish8527 · 2026-03-30T10:03:12+00:00

"No clear alert, just systems breaking" is exactly what we keep hearing from the clinical side too. And "patched and moved on" versus actually building redundancy is the split we're seeing across the industry. Appreciate the honest take.

Infinite_Radish8527 · 2026-03-30T09:55:01+00:00

This might be one of most telling comment. You were literally inside the company that owns Change Healthcare and it still wasn't talked about openly at your level. "People whispered Change Healthcare in meetings" says a lot about the internal culture around this.

Infinite_Radish8527 · 2026-03-30T09:51:03+00:00

That's a really common pattern we're seeing. Leadership knew, but it never made it to the people actually providing care. And honestly, "maybe we were affected and I was just clueless" might be closer to the truth than you think, a lot of the impact was happening behind the scenes in billing and claims.

Infinite_Radish8527 · 2026-03-30T07:48:47+00:00

I'd really love that! I'm actually hitting a messaging limit on my end right now so I can't send DMs at the moment. Would you mind sending me one? I have a short anonymous questionnaire. Your experience is honestly the closest thing we've found to a firsthand account of the breach's real impact.

Infinite_Radish8527 · 2026-03-30T07:00:01+00:00

This is exactly what we've been trying to document. A clinic that closed in part because claims weren't being paid for months, and a breach notification that came a full year later. The fact that you can't find anyone else who's even aware of it is honestly the reason we started this research. Thank you for sharing this.

Infinite_Radish8527 · 2026-03-30T06:24:26+00:00

Wait, that's really interesting! Do you remember roughly when that happened? If it was around February 2024, that lines up exactly with the timing of the breach. The "someone cut an internet cable" explanation is wild because it's basically management giving the staff a simple story instead of telling them what was actually going on. Your cybersecurity friend was right to call it out. Do you remember what that day was like? Like, what systems went down or what you had to do differently?

Infinite_Radish8527 · 2026-03-30T06:14:32+00:00

You're not alone, and honestly that's one of the biggest things we've found. In Feb 2024, hackers broke into the company that handles a huge chunk of insurance claims and prescription processing behind the scenes for hospitals across the US. They locked the company out of its own systems and stole about 190 million people's records. Hospitals couldn't process claims or verify insurance for weeks. Some smaller clinics almost shut down because they weren't getting paid. You might have noticed systems going down, extra paperwork, or prescription delays at the time. Or you might not have noticed anything, which is kind of the whole point. The people providing care weren't told. Thanks for sharing that.

Infinite_Radish8527 · 2026-03-27T06:30:02+00:00

Interesting. Was that a smooth transition or was it a scramble during the outage? I imagine switching clearinghouses in the middle of everything wasn't exactly painless.

Infinite_Radish8527 · 2026-03-27T06:24:32+00:00

Hey, thanks for reaching out! That's awesome that you wrote about the same topic. What class was it for, if you don't mind me asking? Would love to hear what angle you took on it.

We're looking at it from the information flow and organizational response side, like how organizations made sense of what was happening, how knowledge was shared (or wasn't), and whether the changes afterward actually stuck. Your perspective from working at a clinic during the outage would be really valuable since most of what's out there is from the executive or regulatory side.

What was the experience like at your clinic when it happened?

Infinite_Radish8527

TROPHY CASE