February 28, 2024 - MGMA letter on Change Healthcare cybersecurity attack

February 28, 2024 

The Honorable Xavier Becerra
Secretary
U.S. Department of Health and Human Services
200 Independence Avenue, SW
Washington, DC 20201

Re: Mitigating the impact on medical groups from the cyberattack on Change Healthcare

Dear Secretary Becerra:

The Medical Group Management Association (MGMA) thanks you and the Department of Health and Human Services (HHS) for your efforts to address the harmful impact resulting from the cybersecurity attack on Change Healthcare. Given the size of Change Healthcare and the breadth of services it provides to physician groups and the healthcare sector, the fallout from this malicious cyberattack is rippling across the country. We urge HHS to use its authority to avoid compounding these concerns, supporting physician practices, and helping facilitate patients’ continued access to care.

With a membership of more than 60,000 medical practice administrators, executives, and leaders, MGMA represents more than 15,000 group medical practices ranging from small private medical practices to large national health systems, representing more than 350,000 physicians. MGMA’s diverse membership uniquely situates us to offer the following insights.

It is imperative that all Change Healthcare operations be safely reestablished as quickly as possible. While the full extent of the cyberattack and a comprehensive understanding of its effects on the healthcare system currently remain unknown, MGMA has been engaging with members and hearing alarming feedback about the myriad ways their practices have been impacted.

View the full letter