On Feb. 12, cybercriminals used compromised credentials to access a portal for gaining remote access to desktops, according to written testimony.
The portal didn’t have multifactor authentication turned on — a protection one expert told Cybersecurity Dive would likely have prevented the breach. The attacker deployed ransomware nine days after first accessing Change’s systems, according to the testimony.
“Did you lack the financial resources to implement a multifactorial authentication system? I'm just not sure why you haven’t had this in place yet,”
“Here’s the problem. It didn’t stop a data leak. Americans’ personal and private health information is on the dark web. This is private health data that you are responsible for protecting,” she said. “Mr. Witty, I suspect that decision will be a case study in crisis mismanagement for decades to come.”
“It’s extremely frustrating to have one of the largest companies in the world failing to meet its obligations under existing law to adequately protect some of our most sensitive personal information,” said Rep. Frank Pallone, D-N.J. “[...] Mr. Witty, this never should have happened, and it can’t happen again.”
Holyacid on December 11st, 2024 at 05:51 UTC »
Guys sitting there thinking in his head “ hmm I wonder if I should get the carbon package on my gt3rs “
beklog on December 11st, 2024 at 06:14 UTC »
On Feb. 12, cybercriminals used compromised credentials to access a portal for gaining remote access to desktops, according to written testimony.
The portal didn’t have multifactor authentication turned on — a protection one expert told Cybersecurity Dive would likely have prevented the breach. The attacker deployed ransomware nine days after first accessing Change’s systems, according to the testimony.
“Did you lack the financial resources to implement a multifactorial authentication system? I'm just not sure why you haven’t had this in place yet,”
“Here’s the problem. It didn’t stop a data leak. Americans’ personal and private health information is on the dark web. This is private health data that you are responsible for protecting,” she said. “Mr. Witty, I suspect that decision will be a case study in crisis mismanagement for decades to come.”
“It’s extremely frustrating to have one of the largest companies in the world failing to meet its obligations under existing law to adequately protect some of our most sensitive personal information,” said Rep. Frank Pallone, D-N.J. “[...] Mr. Witty, this never should have happened, and it can’t happen again.”
FuzzyFuzzNuts on December 11st, 2024 at 06:37 UTC »
UnitedHealth CEO Andrew Witty doesn't unserstand all that "syber" mumbo-jumbo and doesn't see why it all costs so much