A cyber-security incident compromised payment information for about 300 clients at a health system. The incident led to investigations by HHS regarding Medicaid and Medicare flexibilities post-Change Healthcare cyberattack. The healthcare industry faces increasing cybersecurity risks, with policymakers urged to adopt actions similar to breach disclosure rules. Hospitals and insurers are in disagreement over the response to the cyberattack, highlighting the risk posed by third-party vendors. The Change Healthcare cyberattack disrupted critical health care technology infrastructure, prompting federal regulators to consider new rules to prevent future incidents.