UnitedHealth is making struggling doctors repay loans issued after last year’s cyberattack
UnitedHealth CEO Andrew Witty testifies before the Senate Finance Committee on Capitol Hill in Washington, May 1, 2024.
Kent Nishimura | Getty Images
Following the massive cyberattack on UnitedHealth Group’s Change Healthcare unit last year, the company launched a temporary funding assistance program to help medical practices with their short-term cash flow needs, offering no-interest loans with no added fees.
A little over a year later, UnitedHealth is aggressively going after borrowers, demanding they “immediately repay” their outstanding balances, according to documents viewed by CNBC and providers who received funding. Some groups have been asked to repay hundreds of thousands of dollars in a matter of days.
Optum, UnitedHealth’s financial, pharmacy and care services arm, is telling borrowers that it reserves the right to “begin offsetting claims payable” to the practices, meaning the company will withhold separate funds until it recoups the loan.
It’s a significant change in posture for the company, which suffered a cyberattack in February 2024 that compromised data from around 190 million Americans, the largest reported health-care breach in U.S. history. The ensuing disruption caused severe fallout across the health-care system, leaving many providers temporarily unable to get paid for their services. Some dipped into their personal savings to keep their practices afloat.
During a Senate hearing about the attack in May, UnitedHealth CEO Andrew Witty said providers would only be required to repay the loans when “they, not me, but they confirm that their cash flow is normalized.”
Several doctors who took advantage of the financing told CNBC that they can’t meet the company’s new demands. Dr. Christine Meyer, an internist who started a practice in Exton, Pennsylvania, received a letter from Optum earlier this month telling her to immediately submit her organization’s payment.
“We are not in any position to start repaying this loan,” Meyer, who started her practice about 20 years ago, told CNBC. She has been a vocal critic of UnitedHealth following the breach.
“I’m just looking at all my legal options at this point,” Meyer said. “But repaying them $750,000 in five days is obviously not going to happen.”
UnitedHealth didn’t comment on specific cases, but a spokesperson for Change Healthcare confirmed that the company has started recouping the loans.
“Now, more than one year post the event and with services restored, we have begun the process of recouping the interest-free funding we provided to providers,” the spokesperson said in a statement.
The company said the U.S. Department of Health and Human Services took the same approach last year “under its own cyber-attack lending program.” HHS launched a separate funding assistance program through the Centers for Medicare & Medicaid Services last March. CMS said it would automatically recoup payments from Medicare claims, and providers could accrue interest, according to a release.
“We continue to work with providers on repayment and other options, and continue to reach out to those providers that have not been responsive to previous calls or email requests for more information,” the Change Healthcare spokesperson said.
Providers were told that UnitedHealth reserved the right to withhold future payments when they signed up for the funding assistance program, the company added. CNBC independently reviewed a copy of a loan agreement for the program and confirmed this statement.
Change Healthcare, which offers payment and revenue cycle management tools, was acquired by Optum in 2022.
After discovering the breach last year, UnitedHealth said it isolated and disconnected the impacted systems. The company paid out more than $9 billion to providers in 2024, and more than $4.5 billion has already been repaid, according to the company’s fourth-quarter earnings report in January. UnitedHealth said providers would receive an invoice once standard payment operations resumed, and that they would be subject to a repayment period of 45 business days.
“Change Healthcare will notify the recipient that the funding amount is due after claims processing or payment processing services have resumed and payments impacted during the service disruption period are processed,” the website says.
Dwindling deposits, lost revenue
While the vast majority of Change Healthcare’s services have been restored over the course of the last year, three products are still listed as “partial service available,” according to UnitedHealth’s cyberattack response website.
And doctors are still reeling.
Meyer said that when the breach took place, she watched her practice’s daily deposits shrivel from the range of $60,000 to $80,000 to about $150 “overnight.” She applied for Optum’s temporary funding assistance program, and after some difficulty and back and forth with the company, she ultimately received a total of $756,900 in financial assistance.
Former Senator Bob Casey Jr., D-Pa., shared Meyer’s story during the congressional hearing in May. He asked Witty about the company’s approach to the repayment process.
“I’d like to absolutely confirm to you and Dr. Meyer that we have no intention of asking for loan repayment until after she determines that her business is back to normal,” Witty told lawmakers. “Even then, we would not look for repayment until 45 business days – 60 calendar days – after that and there would be no interest and no fee associated with that loan.”
“So it would be a determination she makes?” Casey asked.
“That’s absolutely right,” Witty said.
Meyer said that’s not what happened.
UnitedHealth Group Inc. headquarters stands in Minnetonka, Minnesota, U.S.
Mike Bradley | Bloomberg | Getty Images
She received a notice from Optum on Jan. 24, which was viewed by CNBC, that requested repayment since “the service disruption has ended for most clients.” Meyer said she called and told the company she was “not in any position to pay.”
Meyer claims that her practice lost more than $1 million in revenue due to the Change Healthcare cyberattack. She told CNBC the figure was based on a forensic financial analysis her practice carried out by comparing its charges against payments over recent years. The $1.2 million figure accounts for losses across all its insurers, not just UnitedHealthcare, Meyer said.
On April 1, Meyer received another notice requesting immediate repayment within five business days. The letter was addressed to Meyer. But the name of the practice on the letter, Insight Counseling, as well as the total amount due, $925,200, were incorrect.
Meyer said she called Optum again and was told the company made a mistake, but that she had five days to repay her actual total of $750,000. At that point, the company would start withholding her UnitedHealthcare payments, which she described as a “shakedown.”
Meyer said her practice typically receives annual claims payments of about $150,000 to $200,000 from UnitedHealthcare.
“I guess I’ll just let them take those payments back for the next three years until they get their money back,” she told CNBC.
In a post on LinkedIn on Thursday, Meyer wrote that she and her team “made a plan to leave the least amount of money in the account set up to receive payments from UnitedHealthcare. If it isn’t there, they can’t get it.”
‘Very frustrating experience’
Dr. Purvi Parikh, an allergist and immunologist with a private practice in New York, shared a similar story.
Parikh’s practice received about $440,000 in funding assistance after the breach. She said she started getting repayment notices late last year, and that Optum was threatening to offset claims payable to the practice.
“We were already hit very hard by the Change Healthcare hack,” Parikh said in an interview. “Now on top of that, they’re asking for all of this money back or they’re going to hold future payments ransom. It’s just been a very frustrating experience dealing with Optum.”
Parikh’s practice requested a one-month extension on its final payment of $101,650 in January to try and keep UnitedHealth from withholding other payments. In the email request, Parikh’s colleague wrote that “it has been quite difficult to recover financially.”
Optum granted Parikh’s practice the extension.
“People don’t just have that amount of money just sitting around,” Parikh said. “We’ve paid everything back, but it wasn’t without hardship.”
A physician who runs a pediatric practice in New Jersey said UnitedHealth has already started withholding payments from the organization. The practice received more than $500,000 in funding assistance following the Change Healthcare breach.
The doctor, who asked not to be named due to the sensitive nature of the situation, said the practice began receiving phone calls and emails from Optum requesting repayment beginning late last year. The group indicated that it didn’t have the money, but would set up a payment plan and had begun the process.
But the doctor said its billing department noticed that UnitedHealth had already started holding back claims payments. In its explanation of benefits, which details what an insurer will cover, the doctor said the company has a line that reads, “UnitedHealthcare is withholding payment for Optum.”
WATCH: Health and Human Services Department opens probe into hack at UnitedHealth’s Change Healthcare
Xpeng CEO He Xiaopeng speaks to reporters at the electric carmaker’s stand at the IAA auto show in Munich, Germany on September 8, 2025.
Arjun Kharpal | CNBC
Germany this week played host to one of the world’s biggest auto shows — but in the heartland of Europe’s auto industry, it was buzzy Chinese electric car companies looking to outshine some of the region’s biggest brands on their home turf.
The IAA Mobility conference in Munich was packed full of companies with huge stands showing off their latest cars and technology. Among some of the biggest displays were those from Chinese electric car companies, underscoring their ambitions to expand beyond China.
Europe has become a focal point for the Asian firms. It’s a market where the traditional automakers are seen to be lagging in the development of electric vehicles, even as they ramp up releases of new cars. At the same time, Tesla, which was for so long seen as the electric vehicle market leader, has seen sales decline in the region.
Despite Chinese EV makers facing tariffs from the European Union, players from the world’s second-largest economy have responded to the ramping up of competition by setting aggressive sales and expansion targets.
“The current growth of Xpeng globally is faster than we have expected,” He Xiaopeng, the CEO of Xpeng told CNBC in an interview this week.
Aggressive expansion plans
Chinese carmakers who spoke to CNBC at the IAA show signaled their ambitious expansion plans.
Xpeng’s He said in an interview that the company is looking to launch its mass-market Mona series in Europe next year. In China, Xpeng’s Mona cars start at the equivalent of just under $17,000. Bringing this to Europe would add some serious price competition.
Meanwhile, Guangzhou Automobile Group (GAC) is targeting rapid growth of its sales in Europe. Wei Haigang, president of GAC International, told CNBC that the company aims to sell around 3,000 cars in Europe this year and at least 50,000 units by 2027. GAC also announced plans to bring two EVs — the Aion V and Aion UT — to Europe. Leapmotor was also in attendance with their own stand.
There are signs that Chinese players have made early in roads into Europe. The market share of Chinese car brands in Europe nearly doubled in the first half of the year versus the same period in 2024, though it still remains low at just over 5%, according to Jato Dynamics.
“The significant presence of Chinese electric vehicle (EV) makers at the IAA Mobility, signals their growing ambitions and confidence in the European market,” Murtuza Ali, senior analyst at Counterpoint Research, told CNBC.
Tech and gadgets in focus
Many of the Chinese car firms have positioned themselves as technology companies, much like Tesla, and their cars highlight that.
Many of the electric vehicles have big screens equipped with flashy interfaces and voice assistants. And in a bid to lure buyers, some companies have included additional gadgets.
For example, GAC’s Aion V sported a refrigerator as well as a massage function as part of the seating.
The Aion V is one of the cars GAC is launching in Europe as it looks to expand its presence in the region. The Aion V is on display at the company’s stand at the IAA Mobility auto show in Munich, Germany on September 9, 2025.
Arjun Kharpal | CNBC
This is one way that the Chinese players sought to differentiate themselves from legacy brands.
“The chances of success for Chinese automakers are strong, especially as they have an edge in terms of affordability, battery technology, and production scale,” Counterpoint’s Ali said.
Europe’s carmakers push back
Legacy carmakers sought to flex their own muscles at the IAA with Volskwagen, BMW and Mercedes having among the biggest stands at the show. Mercedes in particular had advertising displayed all across the front entrance of the event.
BMW, like the Chinese players, had a big focus on technology by talking up its so-called “superbrain architecture,” which replaces hardware with a centralized computer system. BMW, which introduced the iX3 at the event, and chipmaker Qualcomm also announced assisted driving software that the two companies co-developed.
Volkswagen and French auto firm Renault also showed off some new electric cars.
Regardless of the product blitz, there are still concerns that European companies are not moving fast enough. BMW’s new iX3 is based on the electric vehicle platform it first debuted two years ago. Meanwhile, Chinese EV makers have been quick in bringing out and launching newer models.
“A commitment to legacy structures and incrementalism has slowed its ability to build and leverage a robust EV ecosystem, leaving it behind fast moving rivals,” Tammy Madsen, professor of management at the Leavey School of Business at Santa Clara University, said of BMW.
While European autos have a strong brand history and their CEOs acknowledged and welcomed the competition this week in interviews with CNBC, the Chinese are not letting up.
“Europe’s automakers still hold significant brand value and legacy. The challenge for them lies in achieving production at scale and adopting new technologies faster,” Counterpoint’s Ali said.
“The Chinese surely are not waiting for anyone to catch-up and are making significant gains.”
Marc Benioff is keeping an eye on Palantir.
The co-founder and CEO of sales and customer service management software company Salesforce is well aware that investors are betting big on Palantir, which offers data management software to businesses and government agencies.
“Oh my gosh. I am so inspired by that company,” Benioff told CNBC’s Morgan Brennan in a Tuesday interview at Goldman Sachs‘ Communacopia+Technology conference in San Francisco. “I mean, not just because they have 100 times, you know, multiple on their revenue, which I would love to have that too. Maybe it’ll have 1000 times on their revenue soon.”
Salesforce, a component of the Dow Jones Industrial Average, remains 10 times larger than Palantir by revenue, with over $10 billion in revenue during the latest quarter. But Palantir is growing 48%, compared with 10% for Salesforce.
Benioff added that Palantir’s prices are “the most expensive enterprise software I’ve ever seen.”
“Maybe I’m not charging enough,” he said.
It wasn’t Benioff’s first time talking about Palantir. Last week, Benioff referenced Palantir’s “extraordinary” prices in an interview with CNBC’s Jim Cramer, saying Salesforce offers a “very competitive product at a much lower cost.”
The next day, TBPN podcast hosts John Coogan and Jordi Hays asked for a response from Alex Karp, Palantir’s co-founder and CEO.
“We are very focused on value creation, and we ask to be modestly compensated for that value,” Karp said.
The companies sometimes compete for government deals, and Benioff touted a recent win over Palantir for a U.S. Army contract.
Palantir started in 2003, four years after Salesforce. But while Salesforce went public in 2004, Palantir arrived on the New York Stock Exchange in 2020.
Palantir’s market capitalization stands at $406 billion, while Salesforce is worth $231 billion. And as one of the most frequently traded stocks on Robinhood, Palantir is popular with retail investors.
Salesforce shares are down 27% this year, the worst performance in large-cap tech.
Salesforce and Palantir year to date stock chart.
-
Sports3 years ago‘Storybook stuff’: Inside the night Bryce Harper sent the Phillies to the World Series
-
Sports1 year agoStory injured on diving stop, exits Red Sox game
-
Sports2 years agoGame 1 of WS least-watched in recorded history
-
Sports2 years agoMLB Rank 2023: Ranking baseball’s top 100 players
-
Sports2 years agoButton battles heat exhaustion in NASCAR debut
-
Sports4 years ago
Team Europe easily wins 4th straight Laver Cup
-
Environment2 years agoJapan and South Korea have a lot at stake in a free and open South China Sea
-
Environment11 months agoHere are the best electric bikes you can buy at every price level in October 2024