AARP Hearing Center
![AARP is calling for stronger federal action in response to recent health care cyberattacks illustration of hands typing on a keyboard with health care icons and the U.S. Capitol](https://aarp.widen.net/content/qqo3zv8evd/jpeg/102740-health-data-breaches.jpg?crop=true&anchor=0,0&q=80&color=ffffffff&u=ovnylx&w=1140&h=655)
Criminals have hacked the data of millions of Americans this year in cyberattacks on health insurance companies and hospital systems, and AARP is urging more action to protect consumers.
We wrote to the head of the Department of Health and Human Services (HHS) to express our deep concern over the recent spate of cyberattacks, calling them “a wake-up call” for the industry.
![member card Image Alt Attribute](https://cdn.aarp.net/content/dam/experience-fragments/uxdia-folder-structure/en/features/membership/inline-membership-promo/default/master5/_jcr_content/root/responsivegrid/container_copy/container/articleimage.coreimg.75.1140.png/content/dam/uxdia/membership-card-d-and-t.png)
LIMITED TIME OFFER: Labor Day Sale!
Join AARP for just $9 per year with a 5-year membership and get a FREE Gift!
“Persistent vulnerabilities in the American health care system are putting our sensitive personal, financial and health information at risk of being exposed and exploited,” AARP Senior Vice President for Government Affairs Bill Sweeney wrote in a July 31 letter to HHS Secretary Xavier Becerra.
An attack on the Ascension health system in May delayed appointments, disrupted access to medical tests and forced some emergency rooms to divert ambulances to other hospitals, according to news reports.
Learn How AARP is Fighting for You
AARP is your fierce defender on the issues that matter to people 50-plus. Read more about how we’re fighting for you every day in Congress and across the country.
In February, cybercriminals stole what has been described as a substantial amount of data in a ransomware attack on UnitedHealth Group subsidiary Change Healthcare. The company is still determining how many people were affected, but HHS has called the impact on patient care and privacy "unprecedented.."
“We are particularly concerned that after the recent attacks, some consumers still have not been directly notified or encouraged to take steps to protect themselves,” Sweeney told HHS in the letter. “People cannot afford to wait months until an investigation verifies their data was compromised.”
Join Our Fight to Protect Patient Privacy
Sign up to become an AARP activist on financial security and other issues important to people 50 and older.
AARP called on HHS and the health care industry to take a number of actions in response to the attacks. They include: rapid notification whenever consumers are impacted; a holistic analysis of IT vulnerabilities within health care systems that handle consumer data; and an examination of laws and regulations to make sure patients are protected.
HHS and health care companies should focus not only on preventing future attacks, we wrote, but also on developing notification and contingency plans to lessen the impact on patients when they do occur.
Read our letter and learn more about how to protect yourself from identity theft and fraud.
More From AARP
AARP-Backed Bill Targets AI Deepfake Scams
Task force would examine the risks, benefits of AI in bankingWhat I Did When Hackers Attacked Me
How Rob Tannenbaum survived an onslaught on his accounts by cyberthievesAre You Ready if a Ransomware Attack Hits Your Computer?
Businesses and governments are typical targets, but individuals can be victims, too
Recommended for You