On February 21, 2024, Change Healthcare, a recently acquired subsidiary of UnitedHealth Group, fell victim to a ransomware attack that accessed Change’s oldest system. It included an employee phishing incident, the lack of proper multi-factor authentication (MFA), and surprisingly enough, the building's HVAC portal system. It rendered their backups useless. Change Healthcare The attack on Change Healthcare forced the company to shut down its systems, affecting hundreds of industry services including critical benefits verification, claims submission, patient prescription and reimbursement fulfillment plans, and disrupting healthcare operations for millions of Americans. Who was affected in the Change Healthcare Breach? The breach included highly sensitive information such as medical diagnoses, test results, personal identifiers, and Social Security numbers. According to data released by First Health Advisory, a digital health risk assurance firm, they described the breach as t...
A cybersecurity knowledge base for small business