FEDERALHackingSupply Chain (3P Vendor)Customer Data InvolvedPIIPHILowActive
CHANGE HEALTHCARE INC.
bd_36e4f538febdd83a · schema v1 · pii pii-v1
Full breach record for CHANGE HEALTHCARE INC. →Bioventus (reporting entity) disclosed in its 10-K Item 1C that Change Healthcare (victim/third-party vendor) experienced a cybersecurity incident where a threat actor gained access to its IT systems. Bioventus states the incident has not materially affected its financial condition, though patient billing and claims processing were disrupted. Bioventus identified an alternative intermediary and resumed some submissions. UnitedHealth Group (Change Healthcare's parent) was investigating as of March 7, 2024.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_ceefcf273bc5de75SEC 8-Kfiled 2024-03-14(2d gap)Verified
- bd_60972bcbcf823790SEC 8-Kfiled 2024-03-08(4d gap)Candidate
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1665988/000162828024010376/bvs-20231231.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Mar 12, 2024
- Raw hash
- e46d3aee20c873cbc2b62e2c42bc361fbf0383b70797d45f79d0968f65cecac3
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- BIOVENTUS LLCnorm: bioventus
- Domain
- bioventus.com
Victim entity
- Name
- CHANGE HEALTHCARE INC.norm: change healthcare
- Domain
- changehealthcare.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Change Healthcarevendor
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.