2024-02-27 Encompass Health Corp Cybersecurity Incident

Page last updated on April 5, 2024

Encompass Health Corp initially disclosed a cybersecurity incident in an SEC 8-K filing on 2024-02-27 17:09:56 EST.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2024-02-21
Disclosure Date: 2024-02-27
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2024-02-27

Encompass Health Corp filed an 8-K at 2024-02-27 17:09:56 EST

Item 7.01 Regulation FD Disclosure.

On February 21, 2024, Encompass Health Corporation (the “Company”) received notice from Change Healthcare, a subsidiary of UnitedHealth Group that acts as an intermediary for processing our payment claims for all payors, of a cybersecurity incident affecting certain of Change Healthcare’s information technology systems. In response to the incident, both the Company and Change Healthcare severed those business service connections between the Company’s systems and Change Healthcare’s. Since receiving notice from Change Healthcare, the Company has been conducting forensics on its systems, including searching for known indicators of compromise. To date, the Company has not identified any compromise or unauthorized access of its systems or networks. The Change Healthcare incident has not affected the Company’s operations, except its submission of payment claims. The Company is still receiving referrals and admitting, caring for, and discharging patients in the ordinary course. In the event the Change Healthcare service is not restored in a timely fashion, the Company may experience payment collection delays as it turns to alternative channels to submit claims. At this time, Change Healthcare has not provided an estimated service restoration timeline. As of the date of this Current Report on Form 8-K, the Company has not determined that the Change Healthcare cybersecurity incident is material to the Company.

The information contained herein is being furnished pursuant to Item 7.01 of Form 8-K, “Regulation FD Disclosure.” This information shall not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), or incorporated by reference in any filing under the Securities Act of 1933, as amended, or the Exchange Act, except as shall be expressly set forth by specific reference in such a filing. The furnishing of this information will not be deemed an admission as to the materiality of any information contained herein.

Company Information