UnitedHealth CEO Andrew Witty testifies earlier than the Senate Finance Committee on Capitol Hill in Washington, Might 1, 2024.
Kent Nishimura | Getty Pictures
Following the huge cyberattack on UnitedHealth Group’s Change Healthcare unit final 12 months, the corporate launched a brief funding help program to assist medical practices with their short-term money stream wants, providing no-interest loans with no added charges.
Somewhat over a 12 months later, UnitedHealth is aggressively going after debtors, demanding they “instantly repay” their excellent balances, in keeping with paperwork seen by CNBC and suppliers who acquired funding. Some teams have been requested to repay lots of of 1000’s of {dollars} in a matter of days.Â
Optum, UnitedHealth’s monetary, pharmacy and care companies arm, is telling debtors that it reserves the fitting to “start offsetting claims payable” to the practices, which means the corporate will withhold separate funds till it recoups the mortgage.
It is a vital change in posture for the corporate, which suffered a cyberattack in February 2024 that compromised knowledge from round 190 million Individuals, the biggest reported health-care breach in U.S. historical past. The following disruption brought on extreme fallout throughout the health-care system, leaving many suppliers quickly unable to receives a commission for his or her companies. Some dipped into their private financial savings to maintain their practices afloat.
Throughout a Senate listening to in regards to the assault in Might, UnitedHealth CEO Andrew Witty stated suppliers would solely be required to repay the loans when “they, not me, however they affirm that their money stream is normalized.”
A number of medical doctors who took benefit of the financing instructed CNBC that they cannot meet the corporate’s new calls for. Dr. Christine Meyer, an internist who began a follow in Exton, Pennsylvania, acquired a letter from Optum earlier this month telling her to right away submit her group’s cost.Â
“We’re not in any place to start out repaying this mortgage,” Meyer, who began her follow about 20 years in the past, instructed CNBC. She has been a vocal critic of UnitedHealth following the breach.
“I am simply all my authorized choices at this level,” Meyer stated. “However repaying them $750,000 in 5 days is clearly not going to occur.”

UnitedHealth did not touch upon particular circumstances, however a spokesperson for Change Healthcare confirmed that the corporate has began recouping the loans.
“Now, multiple 12 months put up the occasion and with companies restored, we’ve got begun the method of recouping the interest-free funding we supplied to suppliers,” the spokesperson stated in a press release.
The corporate stated the U.S. Division of Well being and Human Providers took the identical method final 12 months “below its personal cyber-attack lending program.” HHS launched a separate funding help program by way of the Facilities for Medicare & Medicaid Providers final March. CMS stated it might routinely recoup funds from Medicare claims, and suppliers might accrue curiosity, in keeping with a launch.
“We proceed to work with suppliers on reimbursement and different choices, and proceed to succeed in out to these suppliers that haven’t been conscious of earlier calls or electronic mail requests for extra info,” the Change Healthcare spokesperson stated.
Suppliers had been instructed that UnitedHealth reserved the fitting to withhold future funds once they signed up for the funding help program, the corporate added. CNBC independently reviewed a duplicate of a mortgage settlement for this system and confirmed this assertion.
Change Healthcare, which provides cost and income cycle administration instruments, was acquired by Optum in 2022.
After discovering the breach final 12 months, UnitedHealth stated it remoted and disconnected the impacted programs. The corporate paid out greater than $9 billion to suppliers in 2024, and greater than $4.5 billion has already been repaid, in keeping with the corporate’s fourth-quarter earnings report in January. UnitedHealth stated suppliers would obtain an bill as soon as normal cost operations resumed, and that they might be topic to a reimbursement interval of 45 enterprise days.Â
“Change Healthcare will notify the recipient that the funding quantity is due after claims processing or cost processing companies have resumed and funds impacted in the course of the service disruption interval are processed,” the web site says.Â
Dwindling deposits, misplaced income
Whereas the overwhelming majority of Change Healthcare’s companies have been restored over the course of the final 12 months, three merchandise are nonetheless listed as “partial service accessible,” in keeping with UnitedHealth’s cyberattack response web site.
And medical doctors are nonetheless reeling.Â
Meyer stated that when the breach came about, she watched her follow’s each day deposits shrivel from the vary of $60,000 to $80,000 to about $150 “in a single day.” She utilized for Optum’s short-term funding help program, and after some issue and backwards and forwards with the corporate, she finally acquired a complete of $756,900 in monetary help.
Former Senator Bob Casey Jr., D-Pa., shared Meyer’s story in the course of the congressional listening to in Might. He requested Witty in regards to the firm’s method to the reimbursement course of.Â
“I might like to completely affirm to you and Dr. Meyer that we’ve got no intention of asking for mortgage reimbursement till after she determines that her enterprise is again to regular,” Witty instructed lawmakers. “Even then, we might not search for reimbursement till 45 enterprise days – 60 calendar days – after that and there could be no curiosity and no payment related to that mortgage.”
“So it might be a willpower she makes?” Casey requested.
“That is completely proper,” Witty stated.Â
Meyer stated that is not what occurred.Â
UnitedHealth Group Inc. headquarters stands in Minnetonka, Minnesota, U.S.
Mike Bradley | Bloomberg | Getty Pictures
She acquired a discover from Optum on Jan. 24, which was seen by CNBC, that requested reimbursement since “the service disruption has ended for many shoppers.” Meyer stated she referred to as and instructed the corporate she was “not in any place to pay.”Â
Meyer claims that her follow misplaced greater than $1 million in income as a result of Change Healthcare cyberattack. She instructed CNBC the determine was primarily based on a forensic monetary evaluation her follow carried out by evaluating its prices in opposition to funds over latest years. The $1.2 million determine accounts for losses throughout all its insurers, not simply UnitedHealthcare, Meyer stated.
On April 1, Meyer acquired one other discover requesting instant reimbursement inside 5 enterprise days. The letter was addressed to Meyer. However the identify of the follow on the letter, Perception Counseling, in addition to the entire quantity due, $925,200, had been incorrect.Â
Meyer stated she referred to as Optum once more and was instructed the corporate made a mistake, however that she had 5 days to repay her precise complete of $750,000. At that time, the corporate would begin withholding her UnitedHealthcare funds, which she described as a “shakedown.”
Meyer stated her follow sometimes receives annual claims funds of about $150,000 to $200,000 from UnitedHealthcare.
“I assume I will simply allow them to take these funds again for the following three years till they get their a refund,” she instructed CNBC.
In a put up on LinkedIn on Thursday, Meyer wrote that she and her crew “made a plan to depart the least amount of cash within the account set as much as obtain funds from UnitedHealthcare. If it is not there, they cannot get it.”
‘Very irritating expertise’
Dr. Purvi Parikh, an allergist and immunologist with a non-public follow in New York, shared an analogous story.
Parikh’s follow acquired about $440,000 in funding help after the breach. She stated she began getting reimbursement notices late final 12 months, and that Optum was threatening to offset claims payable to the follow.
“We had been already hit very arduous by the Change Healthcare hack,” Parikh stated in an interview. “Now on prime of that, they’re asking for all of this a refund or they’ll maintain future funds ransom. It is simply been a really irritating expertise coping with Optum.”
Parikh’s follow requested a one-month extension on its last cost of $101,650 in January to attempt to maintain UnitedHealth from withholding different funds. Within the electronic mail request, Parikh’s colleague wrote that “it has been fairly tough to get well financially.”
Optum granted Parikh’s follow the extension.
“Folks do not simply have that amount of cash simply sitting round,” Parikh stated. “We have paid every little thing again, nevertheless it wasn’t with out hardship.”Â
On Friday, the American Medical Affiliation despatched a letter to Optum urging the corporate to not use a “one-size-fits-all” method to mortgage reimbursement. The AMA additionally requested Optum to honor its dedication to permit physicians to resolve when to start the reimbursement course of.
“Every follow may have distinct ranges of affected person volumes, income era, and value pressures and wishes a reimbursement plan that doesn’t recreate the identical dire monetary straits skilled in the course of the cyberattack when CHC’s programs had been non-functional,” AMA CEO Dr. James Madara wrote.
A doctor who runs a pediatric follow in New Jersey stated UnitedHealth has already began withholding funds from the group. The follow acquired greater than $500,000 in funding help following the Change Healthcare breach.Â
The physician, who requested to not be named as a result of delicate nature of the state of affairs, stated the follow started receiving telephone calls and emails from Optum requesting reimbursement starting late final 12 months. The group indicated that it did not have the cash, however would arrange a cost plan and had begun the method.
However the physician stated its billing division observed that UnitedHealth had already began holding again claims funds. In its clarification of advantages, which particulars what an insurer will cowl, there is a line that reads: “The quantity payable on this assertion has been used to repay quantities owed below your settlement with Change Healthcare Operations, LLC.”
WATCH: Well being and Human Providers Division opens probe into hack at UnitedHealth’s Change Healthcare
