
The US government is now investigating the recent Change Healthcare cyberattack in order to establish whether or not sensitive customer and patient data was stolen.
The investigation is coordinated by the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR), which is tasked with enforcing the Health Insurance Portability and Accountability Act (HIPAA), whose goal is to ensure that private patient data remains private (unless the patients agree otherwise).