Lucy Campbell’s Post

This afternoon the House Subcommittee on Oversight and Investigations released two documents ahead of their hearing this Wednesday (5/1) on the Change Healthcare hacking incident. Based on the summary of planned testimony by UnitedHealth CEO Andrew Witty (UH owns Change) as well as the accompanying background document, it appears that a member of the ALPHV criminal group was able to gain access to Change's internal systems via a compromised logon and a lack of Multifactor Authentication (MFA). Worse, they apparently had unfettered access to the system for 9 days, downloading an estimated 4TB of data without being noticed or stopped. Once they had ransacked as much data as they likely felt they needed, they set off the ransomware bomb that is still impacting healthcare patients nationwide today. If all this is true, there is no way to cover up the ugliness of the fact that a few well-known and relatively cost-effective methods could have been taken that would have either entirely prevented this or seriously constrained ALPHV's access. (NOTE - Apparently the House links were changed on 4/30 - I've updated the links to new ones - MEK) https://lnkd.in/gbpjSrJa https://lnkd.in/gJf2TE8f #Cybersecurity #DataBreach #Cyberdisclosure

UnitedHealth Group disclosed that a February 2024 ransomware attack on its subsidiary Change Healthcare compromised the sensitive information of about 100 million people, affecting a substantial portion of Americans. The breach exposed personal data such as names, Social Security numbers, medical record details, and insurance information. Attackers infiltrated Change Healthcare’s network using compromised login credentials, exploiting the lack of multi-factor authentication on certain systems. Over a period of days, they exfiltrated data before deploying ransomware, disrupting services essential for patient care and healthcare providers. UnitedHealth has since launched a support site and call center for affected individuals, offering free identity protection services while working to restore impacted systems and collaborating with law enforcement. #ChangeHealthcareBreach, #UnitedHealthDataBreach, #CyberSecurity, #DataProtection, #HealthcareData

Change Healthcare lists the medical data stolen in ransomware attack UnitedHealth has confirmed for the first time what types of medical and patient data were stolen in the massive Change Healthcare ransomware attack, stating that data breach notifications will be mailed in July. The company published a data breach notification warning that the ransomware attack exposed a "substantial quantity of data" for a "substantial proportion of people in America." #UnitedHealth #ChangeHealthcare #Optum #healthcare #malware #ransomware #databreach #security #cybersecurity #infosec #hackers #hacking #Hacked

YouAttest for Healthcare Identity Security:   PHI is under attack.   https://lnkd.in/gdSDX-ir More than 100 million users had their data stolen in this event. That makes this the largest digital theft of medical records in the United States that we know of. YouAttest aids in identity security by automating access review around all sensitive data, including PHI. Know your identities, and privileges, w/ (now AI-powered)   YouAttest.com, contact us: https://lnkd.in/g96pUae  #ITSecurity #governance #cybersecurity  #compliance #mspsecurity

UnitedHealth Group's recent update on the cyberattack involving Change Healthcare reveals significant concerns regarding personal and health information exposure. While the exact scope of the data breach is still under investigation, the company acknowledges that it may impact a substantial portion of the American population. The company's approach includes proactive measures to monitor the dark web for potential data leaks and engage with external experts to mitigate further risks. In addition to supporting customers, UnitedHealth is focusing on restoring Change Healthcare's services, with medical claims and pharmacy operations nearly back to normal levels. This incident underscores the critical importance of a robust cybersecurity framework and comprehensive response strategies to address the aftermath of a significant data breach. #Healthcare #Cybersecurity #Risks #DataBreach

Shocking cyberattacks like the recent one on UnitedHealth's Change Healthcare should serve as a chilling wake-up call. 💻⚠️ Don't let your business fall victim to such disruptions. Take proactive steps to strengthen your cybersecurity defenses NOW. Read more about the alarming reality and safeguard your digital assets. #CybersecurityAlert #StayProtected #SanAntonioIT #LocalBusiness https://lnkd.in/dggjMUGF

UnitedHealth Group disclosed that hackers stole a significant amount of health and personal data from its Change Healthcare unit in February, affecting potentially a vast number of Americans. This incident, which ranks among the worst cyberattacks on American healthcare, involved the theft of sensitive data despite a ransom payment, causing major disruptions in medical claims processing and sparking concerns about the vulnerability of patient information. Stay ahead of data breaches by adding another layer of security to your network. Learn more at ookos.com. #datasecurity #cybersecurity #zerotrust

Hello everyone, There is an ongoing development regarding Change Healthcare. A subset of the BlackCat group, responsible for the previous cyberattack, is now claiming to possess patient data and is demanding ransom. This subset, which reportedly carried out the attack as a contractor, alleges that they were not paid by BlackCat for their services. Consequently, they are threatening to release patient data and potentially some agreements between Change Healthcare and its partners unless their demands are met. #Cybersecurity #DataBreach #Ransomware #ChangeHealthcare https://lnkd.in/dsXaBvys

Stay Informed, Stay Prepared Privacy is an ever-evolving field, and understanding what’s happening globally helps us strengthen our own practices. This recent article on the Change Healthcare cyberattack highlights the real-world impact of privacy breaches and the challenges organizations face in protecting data. We encourage our members to read up on current affairs like this one, especially events in other jurisdictions. Staying informed helps us anticipate risks, learn from others, and adapt our strategies to keep data safe. Read more here: https://lnkd.in/eMMrYq39 #PrivacyMatters #DataProtection #StayInformed #CyberSecurity #CurrentAffairs

🔔UnitedHealth verifies that it paid a ransomware group to halt a data breach.🔔 🔒 UnitedHealth recently confirmed paying a ransom to safeguard sensitive data stolen during the Optum ransomware attack in February. This attack caused significant disruptions in crucial healthcare services across the US. The ransomware gang, BlackCat/ALPHV, claimed responsibility, alleging access to 6TB of patient data. 💰 After receiving a $22 million ransom payment, the gang performed an exit scam. Later, an affiliate known as "Notchy" claimed possession of UnitedHealth data, partnering with RansomHub to extort the company again. In an effort to avert the sale or disclosure of patient information, UnitedHealth acknowledged paying a ransom. 💼 In light of the breach, UnitedHealth is offering affected individuals two years of complimentary credit monitoring and identity theft protection services as a form of support. Despite some stolen data appearing on the dark web, UnitedHealth guarantees the publication of no extensive medical records. 💡 Currently, 99% of services impacted by the attack are operational, with medical claims processing almost back to normal levels. UnitedHealth continues its investigation and pledges to notify individuals affected by the breach once it determines the extent of the compromised information. These data breaches are expensive, and services such as credit monitoring add to the total costs of the breach. Don't become an easy target. Get the Cybersecurity Risk Assessment (CSRA) done. My team can assist in identifying your company's security issues. Contact me for a free consultation. #Cybersecurity #DataBreach #HealthcareSecurity #Hipaa #DPCompliance 💻🔒