Top Democrat proposes minimum cybersecurity standards in wake of Change Healthcare attack

A Senate bill from Sen. Mark Warner would allow healthcare providers impacted by cyberattacks to obtain advanced or accelerated CMS payments if they—and any affected intermediaries—meet forthcoming minimum cybersecurity standards set by HHS. Spurred by the Change Healthcare ransomware incident and scrutiny of UnitedHealth Group, the proposal faces questions from industry groups about feasibility, while Sen. Ron Wyden signals complementary legislation and potential executive accountability measures.