Andrew Witty, the CEO of UnitedHealth Group, gave his testimony on the ransomware attack on Change Healthcare to the Senate Finance Committee in June. The attack occurred in February of this year, with the initial point of entry for the ransomware being a server whose multifactor authentication hadn’t been enabled. This is despite the fact that multifactor authentication is a standard practice for servers exposed to the public internet.
After gaining access to the server, the ransomware then acquired access to the Microsoft Active Directory Server.
This ransomware attack was a wake-up call to others in the healthcare industry, prompting them to review their cybersecurity and IT contingency plans and priorities in preparation for a similar incident.
Last week, Chair of the Senate Finance Committee Ron Wyden wrote to Witty asking for answers to queries raised at the hearing which weren’t sufficiently answered. In his letter, Wyden stated that the testimony given offered vague and unclear information about the incident, despite the fact that it was caused by lax cybersecurity practices from Witty’s firm.
UnitedHealth Group soon confirmed that 3rd party security auditors had been hired regularly to review Change Healthcare’s tech infrastructure.
Wyden also asked that Witty confirm if the server whose authentication hadn’t been enabled was included in those audits, as well as whether the method used by ransomware affiliates to access privileges was identified by the auditors. Additionally, he asked that it be confirmed if the defenses implemented following the attack to ensure the technique couldn’t be used again and whether the said defenses had been tested to ensure effectiveness.
It is yet to be confirmed how many individuals were impacted by the ransomware attack, with a Q3 report issued by UnitedHealth Group showing that the cost of the ransomware attack had risen to $2.8 billion.
The firm’s Q1 earnings report estimated total losses following the attack to be $1.6 billion. By the end of the second quarter, the estimate had risen to between $2.3 and 2.4 billion. Projections suggest that as this year ends, the cost could reach $2.87bn.
During an earnings call last week, Witty explained that they prioritized resource allocation to support care providers following the cyberattack. In a statement, he revealed that despite making significant progress to recover from the attack and bring systems back online, the company’s transaction volumes still hadn’t reached levels recorded prior to the cyberattack.
He added that they remained focused on working with consumers to increase transaction volumes and acquire new business using their secure, modern, and capable offerings.
The ransomware attack suffered by Change Healthcare offers significant learning moments for other enterprises like HealthLynked Corp. (OTCQB: HLYK) on how critical it is to treat matters of data security as top priority.
NOTE TO INVESTORS: The latest news and updates relating to HealthLynked Corp. (OTCQB: HLYK) are available in the company’s newsroom at https://ibn.fm/HLYK
About BioMedWire
BioMedWire (“BMW”) is a specialized communications platform with a focus on the latest developments in the Biotechnology (BioTech), Biomedical Sciences (BioMed) and Life Sciences sectors. It is one of 70+ brands within the Dynamic Brand Portfolio @ IBN that delivers: (1) access to a vast network of wire solutions via InvestorWire to efficiently and effectively reach a myriad of target markets, demographics and diverse industries; (2) article and editorial syndication to 5,000+ outlets; (3) enhanced press release enhancement to ensure maximum impact; (4) social media distribution via IBN to millions of social media followers; and (5) a full array of tailored corporate communications solutions. With broad reach and a seasoned team of contributing journalists and writers, BMW is uniquely positioned to best serve private and public companies that want to reach a wide audience of investors, influencers, consumers, journalists and the general public. By cutting through the overload of information in today’s market, BMW brings its clients unparalleled recognition and brand awareness.
BMW is where breaking news, insightful content and actionable information converge.
To receive SMS alerts from BioMedWire, “Biotech” to 888-902-4192 (U.S. Mobile Phones Only)
For more information, please visit https://www.BioMedWire.com
Please see full terms of use and disclaimers on the BioMedWire website applicable to all content provided by BMW, wherever published or re-published: https://www.BioMedWire.com/Disclaimer
BioMedWire
San Francisco, CA
www.BioMedWire.com
415.949.5050 Office
Editor@BioMedWire.com
BioMedWire is powered by IBN
