Incident Response Resources
NTCA Benefits Affected by
Third-Party Cybersecurity Incident
In February 2024, one of our third-party vendors, Change Healthcare (CHC), experienced a cybersecurity incident that resulted in unauthorized access to information on their network. Importantly, this incident was limited to Change Healthcare’s systems. NTCA systems have not been compromised or impacted by this incident. This notice addresses notifications to individuals whose information was determined to be affected.
NTCA was recently notified that data related to certain Group Health Program (GHP) participants was part of the information accessed without authorization due to the incident. For any participants whose information may have been involved, NTCA is working with Change Healthcare to mail notification letters to those individuals as quickly as possible in accordance with applicable laws and regulations.
As part of this process, notification letters will be sent to affected individuals via U.S. mail beginning in mid-February from Change Healthcare on behalf of HealthAxis, a vendor that manages our relationship with CHC. These letters will contain more information and resources to further protect participants' information.
Notably, Change Healthcare has reported that, at this time, there is no indication that any of the information involved has been misused; however, out of an abundance of caution, Change Healthcare is offering complimentary credit monitoring to support any individuals who believe that their information may have been affected as a result of the incident. The formal notice letter being mailed out will include more information regarding signing up for this credit monitoring.
We understand that you may have questions. For more information regarding this notice, you can visit Change Healthcare’s website at www.changecybersupport.com or call their dedicated call center for this incident at 866-262-5342.
Thank you for your continued support and patience as we worked to close this process. We will update this page with the latest information as it becomes available.