Cybersecurity Incident – Change Healthcare
Change Healthcare, a prominent healthcare technology provider linking providers, payers, and patients, has reported a cybersecurity incident. As a customer, CareFirst BlueCross BlueShield (CareFirst) received notification of this incident on Wednesday, February 21 and immediately severed network connections with Change Healthcare's to prevent any potential further risk to our members. Importantly, the cybersecurity incident did not occur within CareFirst's own systems.
We acknowledge that CareFirst is among numerous healthcare entities potentially affected by this incident. Currently, the full extent of the data impact has not yet been determined. CareFirst is actively evaluating how this incident might impact our services and maintains ongoing dialogue with Change Healthcare.
As we further evaluate the implications of Change Healthcare's security incident, we encourage you to use one of the following methods to verify eligibility depending on the member’s line of business:
- Commercial/FEP/Medicare Advantage: visit CareFirst Direct or call provider services at 800-842-5975
- Community Health Plan Maryland Medicaid/Dual Prime: visit MyHealthPortal or call 410-779-9359 or 800-730-8543
We are taking necessary actions to maintain our operations with providers and patients. Access to eligibility remains a key focus for us, just as it is for you. Ensuring the safety and well-being of our members is our top priority, and we will continue to be transparent as we navigate this situation.