Dear Valued Customers,

We understand the Change Healthcare cybersecurity event (“CHC CE”) continues to cause concern for many of our customers.

As of 3/27/2024, we can provide further details on the following:

• Impact Assessment:

  Overall, 92% of our customers’ claim volume was not impacted by the CHC CE. However, at the initial time of the event, 8% of claims experienced issues such as eligibility failures or missing remittance/ERAs. As of today, the payor industry has rerouted over 600 payors to alternative trading partners. The impact has been reduced to 4% of claims being routed to approximately 200 payors. Based on XiFin’s visibility, we are publishing a list of payors that are impacted or that we suspect are being impacted. We will be updating this list daily as resolutions occur or alternative pathways are made.

• Remediation Efforts:

  We are actively engaged with payors, clearinghouses, and trading partners to support remediation efforts. This includes establishing alternative pathways for affected connections and prioritizing claim submissions.

  Additionally, we have been proactively inquiring with payors regarding re-enrollment requirements, but most payors are not able to provide direction currently. If re-enrollment is needed, XiFin will initiate the creation of a case and notify you regarding the support that is needed and the next steps.

• Long-Term Strategy:

  In addition to addressing immediate concerns, we are focused on increasing direct connections with payors and improving visibility into potential issues.

In consideration of the ongoing Change Healthcare cybersecurity event, I felt it important to provide you with updates on our response.

On February 21, XiFin received notice that Change Healthcare was experiencing a cybersecurity event, and we immediately began our response. We reviewed our connections with Change Healthcare and commenced our procedures to terminate affected connections. We can confirm that we did not have any connections between XiFin RPM and the affected Change Healthcare systems. It is important to note that Optum owns Change Healthcare, and Optum has communicated that its systems have not been affected by this cybersecurity event. Additionally, when we first understood that this event may have been caused by a vulnerability in ConnectWise software, we immediately reviewed our systems. We confirmed that we were not using any ConnectWise software.

We continue to monitor the status of the Change Healthcare cybersecurity event and confirm that most Change Healthcare systems remain affected and down as of the timing of this communication. We are also actively monitoring industry communications regarding this event. Please know that we are aware of the seriousness of this event and its impact on the healthcare ecosystem.

The only claims and insurance verification transactions that will be impacted by this event are those where Change Healthcare and the Payor have an exclusive connection or where a clearinghouse needs to route through Change Healthcare. Unfortunately, we do not have any information on those impacts, and we are continuing to work with Change Healthcare and others on alternative pathways.

We will continue to monitor this situation and provide updates as the event evolves through a newly created resource page. Don’t hesitate to contact your customer support team if you have questions or concerns regarding your XiFin system.

Thank you for your business and your trust.

Marty Barrack, Esq.
Chief Information Security & Risk Officer
XiFin, Inc.

In consideration of the ongoing Change Healthcare cyber security event, I felt it important to provide you with updates on our response.

On February 21, XiFin (OmniSYS’s parent company) received notice that Change Healthcare was experiencing a cybersecurity event, and we immediately began our response. We reviewed our connections with Change Healthcare and commenced our procedures to terminate affected connections. We did have some CareCLAIM customers using these Change Healthcare systems, and we have disconnected those connections. Additionally, when we first understood that this event may have been caused by a vulnerability in ConnectWise software, we immediately reviewed our systems. We confirmed that we were not using any of the affected software.

We continue to monitor the status of the Change Healthcare cybersecurity event and confirm that most Change Healthcare systems remain affected and down as of the timing of this communication. We are also actively monitoring industry communications regarding this event. Please know that we are aware of the seriousness of this event and its impact on the healthcare ecosystem.

Some of our pharmacy customers using CareCLAIM were impacted, as they were using these affected Change Healthcare systems to receive and/or send claims and eligibility information. If you are one of these impacted customers, you will continue to be impacted until Change Healthcare restores its affected systems, or you move to another switch vendor.

The only claims and insurance verification transactions that will be impacted by this event are those where Change Healthcare and the Payor have an exclusive connection or where a clearinghouse needs to route through Change Healthcare. Unfortunately, we do not have any information on those impacts, and we are continuing to work with Change Healthcare and others on alternative pathways.

We will continue to monitor this situation and provide updates as the event evolves through a newly created resource page. Don’t hesitate to contact your customer support team if you have questions or concerns regarding your OmniSYS system.

Thank you for your business and your trust.

Marty Barrack, Esq.
Chief Information Security & Risk Officer
XiFin, Inc.

Updated January 29, 2025