Lessons From CMS Relief Funding After Cyberattack On Change Healthcare

After the 2024 cyberattack on Change Healthcare, CMS distributed $3.3 billion to providers experiencing revenue disruptions, including $2.2 billion to hospitals. We found that the opt-in, one-size-fits-all nature of this relief funding simultaneously resulted in overpayments to many participating hospitals and underparticipation by many hospitals that had likely been disrupted by the cyberattack.