Health care groups resist cybersecurity rules in wake of landmark breach

A major ransomware attack on Change Healthcare that disrupted healthcare payments nationwide has spurred U.S. policymakers to push for minimum cybersecurity standards, with HHS preparing rules and the Biden administration proposing funding tied to compliance. Hospital groups oppose mandatory requirements and penalties, citing third-party risk and cost burdens, while regulators launch investigations into potential PHI breaches and lawsuits emerge; experts call for outcome-focused, well-funded mandates, though significant movement may be delayed in an election year.