UnitedHealth paid ransom after massive Change Healthcare cyberattack

CBS News— The Russia-based cybercriminals who attacked a UnitedHealth Group-owned company in February did not walk away from the endeavor empty-handed. "A ransom was paid as part of the company's commitment to do all it could to protect patient data from disclosure," a UnitedHealth Group spokesperson confirmed with CBS News late Monday. The spokesperson did not disclose how much the health giant paid after the cyberattack, which shut down operations at hospitals and pharmacies for more than a week....

CNBC—UnitedHealth paid ransom to bad actors, says patient data was compromised in Change Healthcare cyberattack. UnitedHealth Group on Monday said it paid ransom to cyberthreat actors to try and protect patient data.

CNBC—UnitedHealth CEO estimates one-third of Americans could be impacted by Change Healthcare cyberattack. UnitedHealth CEO estimates that data from one-third of Americans could have been compromised in the Change Healthcare cyberattack.

Reading Eagle—Change Healthcare cyberattack was due to a lack of multifactor authentication, UnitedHealth CEO says. By TOM MURPHY (AP Health Writer) The Change Healthcare cyberattack that disrupted health care systems nationwide earlier this year started when hackers entered a server that lacked a basic form of security: multifactor authentication. UnitedHealth CEO Andrew Witty said Wednesday in a U.S. Senate hearing that his company, which owns Change Healthcare, is still trying […]