Change Healthcare

Disclosed Jul 7, 20221,262 affectedConfirmed

The business associate (BA), Change Healthcare Technologies, reported that its business associate (BA) experienced a software issue with caused the protected health information (PHI) of 1,262 individuals to be sent to the wrong recipients. The PHI involved included names, claims and financial information, and other treatment information. The BA notified HHS and affected individuals. Following the breach, the BA implemented additional technical safeguards.

What is known

People affected	1,262 (as reported to HHS)
Disclosed	Jul 7, 2022
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Change Healthcare (Business Associate, GA)

Notices filed

TotalJul 7, 2022

HHS archive1,262 people

Other breaches at Change Healthcare

Ransomware attack on Change Healthcare exposes data of about 190 million peopleRansomware exposed names, addresses, phone numbers, health records, insurance details, financial details, Social Security numbers, government IDs, payment cards and dates of birth. Reported to the California AG.Ransomware193M affectedHealthcareUSFeb 22, 2024

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Change Healthcare