US scrutiny of UnitedHealth / Change Healthcare integration

Health care billing runs on invisible middlemen. Change Healthcare sat at the center, moving claims between doctors, insurers, and pharmacies—often unrelated to whether you chose UnitedHealthcare as your insurer.

When UnitedHealth announced acquisition, DOJ sued in 2022 alleging vertical harm: the biggest insurer might disadvantage rival payers relying on Change's rails or misuse sensitive claims data.

The court rejected an injunction, allowing the deal to close. DOJ did not achieve a breakup; the merged structure became reality.

In February 2024 a ransomware attack on Change Healthcare caused nationwide outages—prescriptions delayed, small clinics unable to get paid, chaos exposing dependency on a single vendor now inside UnitedHealth.

Congressional hearings followed, blending cybersecurity, antitrust, and patient harm narratives. Providers demanded temporary funding support and long-term redundancy.

Antitrust retroactivity is hard; enforcers explore information sharing, security mandates, and future merger policy rather than easily unwinding 2022 clearance.

Private litigation and regulatory reviews continue, but no new court order has split Change from UnitedHealth—this is an ongoing oversight and policy aftermath story.

Health care access can halt when one IT hub fails—concentration becomes a patient safety issue.

Vertical merger losses may look quiet until real-world shocks reveal risks.

Data-rich insurance-plus-IT combos raise exclusion fears for rival insurers and providers.

Cyber resilience is now part of competition debates, not only traditional price theory.

Future health IT mergers face tougher political scrutiny even if legal standards stay similar.

Merger would let UnitedHealth disadvantage rival insurers using Change services.

Sensitive claims data integration creates anticompetitive information advantages.

Vertical foreclosure in claims processing raises costs and reduces innovation.

Post-attack concentration proves public harm from approving the deal.

UnitedHealth says integration improved efficiency and cybersecurity investments.

It argues Change serves all payers with contractual firewalls.

UnitedHealth maintains the cyberattack victimized the company too, requiring cooperation not breakup.

It points to court rejection of DOJ's theories as proof the merger was lawful.

Your pharmacy delay during the outage showed how backend concentration hits front doors.

Insurance premiums aren't directly set by this review, but system resilience affects care access.

No breakup imminent—expect reporting duties and backup system pushes.

Employers choosing insurers should ask about claims redundancy post-attack.

Ongoing hearings may spur rules, not instant divestiture.