25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

Fairview Health Services Sues Change Healthcare After Incurring $7 Million in Losses

Change Healthcare is facing another class action lawsuit over its February 2024 ransomware attack. The latest lawsuit was filed by a healthcare provider to recover losses incurred due to the prolonged outage of Change Healthcare’s claims processing and payment functions.

The ransomware attack was conducted by an affiliate of the BlackCat (ALPHV) ransomware group in February 2024. According to the latest estimate from Change Healthcare, the protected health information of 190 million individuals was stolen in the attack. Many class action lawsuits have already been filed against Change Healthcare over the breach, and they have been consolidated into a single lawsuit, which Change Healthcare is currently attempting to have dismissed. More than two dozen healthcare providers have also sued Change Healthcare to recover losses incurred due to the attack and the massive disruption to its clearinghouse services that followed.

The latest lawsuit was filed by Fairview Health Services, a Minneapolis, MN-based integrated healthcare system that operates 10 hospitals and medical centers, along with primary and specialty care clinics, senior facilities, facilitated living centers, rehabilitation centers, home health care services, counseling, pharmacies and benefit management services at over 100 locations. Fairview Health Services claims that the outage at Change Healthcare resulted in approximately $7 million in losses, with a large proportion of those losses incurred in anesthesia due to the inability to bill for services.  The lawsuit claims the outage prevented Change Healthcare from processing claims for its anesthesia services for more than six months. That meant Fairview Health Services was unable to bill patients for their share of the service costs, which resulted in a poor patient experience, loss of payment, and increased bad debt.

During the outage, Fairview Health Services said it was forced to pay workers overtime to mitigate the impact as cash flow virtually stopped, and expenses were incurred with third-party providers who helped post payments during the prolonged outage. “As a result of [Change Healthcare’s] failure to perform the services it had promised, the interruption in billing for anesthesia services resulted in Fairview having remaining balances from the gap in coverage of over seven million dollars,” according to the Fairview Health Services complaint.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

The lawsuit was originally filed in Ramsey County District Court but was moved to the U.S. District Court in Minnesota. Fairview Health Services asserts claims including negligence and breach of contract, and is attempting to get Change Healthcare to pay restitution and damages to make up for that shortfall, plus an award of compensatory damages of more than $75,000. UnitedHealth Group claims the lawsuit is baseless and has issued a statement confirming its intention to mount a vigorous defense.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist