{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T02:06:14Z","timestamp":1773194774398,"version":"3.50.1"},"reference-count":44,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,12,8]]},"DOI":"10.1109\/acsacw69556.2025.00021","type":"proceedings-article","created":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T19:56:13Z","timestamp":1773086173000},"page":"159-168","source":"Crossref","is-referenced-by-count":0,"title":["Change Healthcare \u2013 Perspective and Lessons from the Nationwide Pharmacy Supply Chain Failure"],"prefix":"10.1109","author":[{"given":"William","family":"Yurcik","sequence":"first","affiliation":[{"name":"Centers for Medicare & Medicaid Services (CMS),Baltimore,MD,USA"}]},{"given":"Andreas","family":"Schick","sequence":"additional","affiliation":[{"name":"U.S. Food and Drug Administration (FDA),Silver Spring,MD,USA"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1377\/hlthaff.2024.01375"},{"issue":"8","key":"ref2","article-title":"As Ransomware Attacks on Health Care Surge, Here\u2019s What Clinicians and Health Systems Can Do","volume-title":"JAMA Network","volume":"332","author":"Bock","year":"2024"},{"key":"ref3","article-title":"Most Nonprofit Hospitals and Health Systems Analyzed Had \u2018Adequate\u2019 or \u2018Strong\u2019 Days of Cash on Hand in 2022, Though About One in Ten Did Not","author":"Levinson","year":"2024","journal-title":"KFF News Release"},{"key":"ref4","article-title":"Pharmacy Benefit Managers: The Powerful Middlemen Inflating Drug Costs and Squeezing Main Street Pharmacies","year":"2024","journal-title":"U.S. Federal Trade Commission\/Interim Staff Report\/Office of Policy Planning"},{"key":"ref5","article-title":"The Cyberattack on Change Healthcare: Lessons for Financial Stability","author":"Fliegelman","year":"2024","journal-title":"Office of Financial Research Brief Series 24-05"},{"key":"ref6","article-title":"The Opaque Industry Secretly Inflating Prices","author":"Abelson","year":"2024","journal-title":"New York Times"},{"key":"ref7","article-title":"The Powerful Companies Driving Local Drugstores Out of Business","author":"Abelson","year":"2024","journal-title":"New York Times"},{"key":"ref8","article-title":"A Shadow Industry","author":"Robbins","year":"2024","journal-title":"New York Times"},{"key":"ref9","article-title":"Fortune 500 \u2013 The Largest Companies in the U.S. by Revenue","year":"2023"},{"key":"ref10","article-title":"UnitedHealthcare - Individuals Served by Segment 2023"},{"key":"ref11","article-title":"U.S. Opens UnitedHealth Antitrust Probe","author":"Mathews","year":"2024","journal-title":"Wall Street Journal"},{"key":"ref12","article-title":"UnitedHealth Group Abandons Two Acquisitions Following Antitrust Division Scrutiny","volume-title":"Press Release","year":"2024"},{"key":"ref13","article-title":"Emanate Health v. Optum Health","year":"2023"},{"key":"ref14","article-title":"Judge Denies DOJ\u2019s Move to Block $13B UnitedHealth Change Deal","author":"Liss","year":"2022","journal-title":"Healthcare Dive"},{"key":"ref15","article-title":"Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure","volume-title":"Final Rule 17 CFR Parts 229, 232, 239, 240, and 249 [Release Nos. 33-11216; 34-97989; File No. S7-09-22] RIN 3235-AM89, published Aug 4 2023 effective Sep 5 2023"},{"key":"ref16","article-title":"How the Ransomware Attack at Change Healthcare Went Down: A Timeline","author":"Whittaker","year":"2025","journal-title":"TechCrunch"},{"key":"ref17","article-title":"Understanding the Change Healthcare Breach and its Impact on Security Compliance","year":"2025"},{"key":"ref18","article-title":"Testimony of Andrew Witty","author":"Witty","year":"2024","journal-title":"CEO UnitedHealth Group Before the House Energy and Commerce Committee Subcommittee on Oversight and Investigations \u2013 Examining the Change Healthcare Cyberattack"},{"key":"ref19","article-title":"Change Healthcare, Compromised by Stolen Credentials, Did Not Have MFA Turned On","volume-title":"Cybersecurity Dive","author":"Kapko","year":"2024"},{"key":"ref20","article-title":"AHA Survey: Change Healthcare Cyberattack Significantly Disrupts Patient Care, Hospitals\u2019 Finances","year":"2024","journal-title":"American Hospital Association"},{"key":"ref21","article-title":"Change Healthcare Cybersecurity Incident Frequently Asked Questions"},{"key":"ref22","article-title":"Change Healthcare Restores Amazon Cloud Services After Cyber Attack","author":"Bruce","year":"2024","journal-title":"Becker\u2019s Health IT"},{"key":"ref23","article-title":"Pharmacy Benefit Managers and the Prescription Drug Supply Chain: Impact on Patients and Taxpayers","year":"2023"},{"key":"ref24","article-title":"What is a Clearinghouse? Background on Change Healthcare Cyberattack and Policy Solutions"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-10739-9_13"},{"key":"ref26","article-title":"Change Healthcare: Claims Processing FAQ for Providers | V5"},{"key":"ref27","article-title":"An Explainer on How Market Concentration Is Measured","author":"Macheel","year":"2024","journal-title":"Promarker"},{"key":"ref28","article-title":"Policy Measures to Address Systemically Important Financial Institutions","year":"2011"},{"key":"ref29","article-title":"Letter to House Energy & Commece Subcommittee for May 1 Hearing on Change Healthcare Cyberattack","year":"2024"},{"key":"ref30","article-title":"Measurability: Cybersecurity Ratings for Third-Party Risk Management in the U.S. Healthcare Sector","volume-title":"Third-party Service Provider Risks in the Economy and Financial System Workshop, Organized by the U.S. Federal Reserve Banks of Boston, Chicago and Dallas and hosted by the U.S. Federal Reserve Bank of Dallas, Houston Branch","author":"Yurcik","year":"2025"},{"key":"ref31","article-title":"Healthcare Performance Trends Report: Q2 2024","year":"2024"},{"key":"ref32","article-title":"Performance Trends Report: 2nd Quarter 2024","year":"2024"},{"key":"ref33","article-title":"UnitedHealth Stands Up Provider Financial Assistance After Change Cyberattack","author":"Olsen","year":"2024","journal-title":"Healthcare Dive Brief"},{"key":"ref34","article-title":"CMS Statement on Change Healthcare Cyberattack","year":"2024"},{"key":"ref35","article-title":"CMS Statement on Continued Action to Respond to the Cyberattack on Change Healthcare","year":"2024"},{"key":"ref36","article-title":"CMS Statement Following Health Care Payer and Provider Roundtable on the Cyberattack on Change Healthcare","year":"2024"},{"key":"ref37","article-title":"Change Healthcare \/ Optum Payment Disruption (CHOPD) Accelerated and Advance Payments for Part A Providers and Part B Suppliers Frequently Asked Questions","year":"2024"},{"key":"ref38","article-title":"Statement for Change Healthcare Non-enforcement Medicaid Informational Bulletin","year":"2024"},{"key":"ref39","article-title":"Change Healthcare Cybersecurity Incident \u2013 CMS Response and State Flexibilities","volume-title":"HHS\/CMS\/CMCS Informational Bulletin","author":"Tsai","year":"2024"},{"key":"ref40","article-title":"CMS Preparing to Close Program that Addressed Medicare Funding Issues Resulting from Change Healthcare Cyber-Attack","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17016\/feds.2025.103"},{"key":"ref42","article-title":"Financial Stability-Responding to Financial System Emergencies","year":"2023"},{"key":"ref43","article-title":"The Change Healthcare Attack: Quantifying Footprint for Cyber (Re)insurers","volume-title":"CyberCube undated blog","author":"Altman"},{"key":"ref44","article-title":"Preliminary Lessons Learned from the Change Healthcare Nationwide Pharmacy Outage","volume-title":"Fintech and Financial Institutions Research Conference","author":"Yurcik"}],"event":{"name":"2025 Annual Computer Security Applications Conference Workshops (ACSAC Workshops)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,12,8]]},"end":{"date-parts":[[2025,12,9]]}},"container-title":["2025 Annual Computer Security Applications Conference Workshops (ACSAC Workshops)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11417955\/11417996\/11418037.pdf?arnumber=11418037","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T05:28:41Z","timestamp":1773120521000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11418037\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,8]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/acsacw69556.2025.00021","relation":{},"subject":[],"published":{"date-parts":[[2025,12,8]]}}}