Change, not providers, responsible for breach notifications: HHS

UnitedHealth Group must notify patients affected by the Change Healthcare breach at its customers' request, according to the Health and Human Services Department.