VA took swift action to disconnect from all affected systems and protect Veterans

You may have heard in the news about the recent Change Healthcare (CHC) cybersecurity incident, which impacted many health care institutions across America. We at VA want to provide an update on what this incident could mean for you.

CHC is one of VA’s vendors, and as soon we became aware of the breach we took swift action to disconnect from all known systems with CHC; we have confirmed that there is no malicious activity or irregularities in our system.

However, CHC announced this week that “a substantial portion of the people in America” could have had some protected health information leaked as a result of this incident. While there is no confirmation that Veteran data was leaked as a result of this incident, we want to provide you with all of the information that you could need to protect yourself.

Here’s what you need to know:

  • CHC is offering credit monitoring for all impacted individuals. CHC will provide two years of free credit monitoring and identity theft protections for those impacted. You can call 1-866-262-5342 or visit the dedicated UHG/CHC website at to learn more.
  • VA has general fraud protection information available to you. There are always steps that you can take to protect yourself against fraud and identity theft, and VA has resources available to you. General information on how to protect yourself from fraud is available at Protecting Veterans From Fraud | Veterans Affairs ( This includes a fraud protection toolkit, frequently asked questions, information about how to be vigilant about scams, and much more.
  • The federal trade commission also offers resources to help protect your identity. For additional information about other precautions available to you, visit the Federal Trade Commission website at
  • VA health care operations are not impacted. While we work through this issue, we want you to know that VA remains fully open for business—and there is no known adverse impact on VA patient care or outcomes to date. Please do not hesitate to come to us for all of your health care needs, as usual.

At this time, we cannot confirm that any Veteran data has been compromised, so we cannot answer specific questions as to whether your data is involved. But if it is determined that Veteran data was included in the data breach, we will ensure that you are notified and full support is provided.

Protecting your personal health information is—and always will be—one of our top priorities. We will continue to monitor this incident closely and provide updates whenever possible.