The Department of Health and Human Services said its probe will focus on identifying the extent of the breach and compliance by UnitedHealth and its subsidiary, Change Healthcare, with the Health Insurance Portability and Accountability Act. The federal government has investigated and penalized health-care organizations for data breaches. Anthem in 2020 paid a $16 million settlement following a 2015 data breach that exposed the protected health information of 79 million people.