Octave Blue Cross and Blue Shield members may have been affected by Change Healthcare data incident

In accordance with the Health Insurance Portability and Accountability Act (HIPAA) privacy rules, Change Healthcare recently notified Octave Blue Cross and Blue Shield (the “company”) that protected health information of members which Change Healthcare associated with our company was illegally accessed in the criminal cyberattack Change Healthcare reported in February 2024.

This incident did not involve any of our company systems. The protected information was accessed within Change Healthcare’s information systems environment.

Change Healthcare is notifying affected members and is providing data-breach notifications required under HIPAA privacy rules. Furthermore, Change Healthcare is offering free credit-monitoring and identity theft protection services to the affected members. Information about these provisions is posted on the Change Healthcare website (changehealthcare.com/hipaa-substitute-notice).

This unfortunate incident occurred without the knowledge, control or involvement of our company, but we are, in its aftermath, working to help manage through this process in the best interests of our clients and their affected members.