A fix has been implemented and we are monitoring the results.
Posted Jul 02, 2025 - 16:07 MDT
Update
We want to make you aware of a phishing email that you may have received from one of our employee’s email accounts earlier today. The email may have appeared to come from Bill Cox and could include suspicious links or unexpected attachments. If you received such an email, please do not click on any links or open any attachments, and delete the message immediately. We take this matter very seriously and have already taken steps to secure the affected account and investigate the incident. At this time, we have no reason to believe any sensitive data was compromised, but we recommend remaining vigilant and reporting any suspicious activity to our security team or your own security team. If you may have clicked on any links or opened any attachments, please work with your security team immediately. We sincerely apologize for any inconvenience this may have caused and appreciate your understanding as we work to prevent this from happening again. If you have any questions or concerns, please don't hesitate to reach out.
Posted Jul 02, 2025 - 16:00 MDT
Investigating
Through both our internal alerting, as well as customer inquiry, we are aware that Bill Cox's email (bcox@uhin.org) account has been compromised through a targeted phishing attack. Malicious emails containing fraudulent DocuSign links have been sent from his address. Please exercise extreme caution and do NOT click on any DocuSign links from Bill Cox's email. We are actively investigating and working to resolve this issue.
Posted Jul 02, 2025 - 14:07 MDT
This incident affected: The CHIE Platform (Alerts - Delivered via Direct, Alerts - Delivered via SFTP, Alerts - MYUHIN Workflow, Clinical Portal, Data Feeds, Federated Query, Results Delivery, VPN Connectivity), Clearinghouse Platform (Batch EDI Processing, Real Time EDI Processing, PIR Connection, CORE Connection, SFTP Connection, UTRANSEND Portal, Payer Network), MYUHIN (File Tool, EDI Enrollment, Eligibility, Claims, Claims Attachments, Prior Authorizations, CHIE Alerts Workflow), Data Source (Data Source Opt Out Notifications), and Customer Support.