UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike

April 30, 2024 at 11:00PM UnitedHealth Group CEO Andrew Witty testified that hackers used leaked credentials to access Change Healthcare’s Citrix portal, leading to a ransomware attack that compromised personal and health information of potentially millions of people in America. The company paid a ransom but was extorted a second time. They have incurred significant … Read more

Philadelphia Inquirer: Data of over 25,000 people stolen in 2023 breach

April 30, 2024 at 04:14PM The Philadelphia Inquirer disclosed a May 2023 cyberattack which compromised the personal and financial data of 25,549 individuals. The breach led to disruption in the publication of the print newspaper, prompting home-delivery subscribers to rely on the unaffected website for news. The incident was claimed by the Cuba ransomware group, … Read more

Change Healthcare hacked using stolen Citrix account with no MFA

April 30, 2024 at 10:19AM UnitedHealth confirmed that Change Healthcare’s network was breached by the BlackCat ransomware gang, causing severe operational disruptions and $872 million in financial damages. The company admitted to paying a ransom to protect people’s data post-compromise. CEO Andrew Witty’s testimony revealed the attack’s details and the remediation efforts taken after the … Read more

London Drugs closes all of its pharmacies following ‘cybersecurity incident’

April 29, 2024 at 02:27PM Canadian pharmacy chain London Drugs has closed all of its stores due to a “cybersecurity incident,” impacting locations across British Columbia, Alberta, Saskatchewan, and Manitoba. The disruption has affected the ability to fill prescriptions, with pharmacists available for urgent needs. The incident reflects the increasing targeting of healthcare organizations and … Read more

Back from the Brink: UnitedHealth Offers Sobering Post-Attack Update

April 23, 2024 at 02:59PM UnitedHealth Group recently experienced cyberattacks compromising customers’ personal data. The company is conducting a data review expected to take several months. Change Healthcare, a subsidiary, was hit by a ransomware attack, leading to payment to perpetrators. The company also suffered another attack resulting in substantial data theft. UnitedHealth Group is … Read more

UnitedHealth confirms it paid ransomware gang to stop data leak

April 23, 2024 at 10:30AM UnitedHealth Group paid a ransom to cybercriminals following the Optum ransomware attack in February, which caused significant disruptions to healthcare services. The attack led to 6TB of sensitive patient data being stolen, with ransom payments totaling $22 million. The company has confirmed a data breach incident and is providing support … Read more

UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack

April 23, 2024 at 10:13AM UnitedHealth Group confirmed a ransomware attack in February, exposing PII and PHI of many Americans. Despite paying a $22 million ransom, the attacker released data. UnitedHealth reported partial functionality restoration and incurred $872 million in costs. $6 billion was allocated for impacted healthcare providers. Investigation and notifications to affected individuals … Read more

UnitedHealth admits breach could ‘cover substantial proportion of people in America’

April 23, 2024 at 08:38AM UnitedHealth Group, the parent company of Change Healthcare, reported finding protected health information and personally identifiable information following a ransomware attack in February. The attack impacted hospitals and pharmacies using UnitedHealth’s services. It could take several months to complete the analysis of the data and identify affected individuals. The attack … Read more

Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor

April 23, 2024 at 06:57AM The LockBit ransomware gang leaked 1Gb of allegedly stolen data from the District of Columbia’s Department of Insurance and Banking. The group threatens to release an additional 800Gb unless a ransom is paid. The stolen data contains sensitive information, potentially including names, Social Security numbers, and driver’s license numbers. Tyler … Read more

Synlab Italia suspends operations following ransomware attack

April 22, 2024 at 11:33AM Synlab Italia, part of a global network with an annual turnover of $426 million, has suspended all medical diagnostic services following a ransomware attack. The breach has potentially exposed sensitive medical data. While some services are gradually being restored, there is no specific recovery timeline provided. Customers are advised to … Read more