article thumbnail

Change Healthcare hacked using stolen Citrix account with no MFA

Bleeping Computer

UnitedHealth confirms that Change Healthcare's network was breached by the BlackCat ransomware gang, who used stolen credentials to log into the company's Citrix remote access service, which did not have multi-factor authentication enabled. [.]

article thumbnail

Cybersecurity Management Lessons from Healthcare Woes

eSecurity Planet

Ransomware attacks and data breaches make headlines when they shut down huge connected healthcare providers such as Ascension Healthcare or Change Healthcare. IT should never be the top expense for a healthcare organization. The costs, affected patients, and consequences continue to be tallied.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

What was Behind the Change Healthcare Breach that Shook the Healthcare Industry?

Centraleyes

In a gripping Senate Finance Committee hearing, Change Healthcare CEO Andrew Witty disclosed that data stolen in the February ransomware attack likely includes information from current (and former) armed forces members. The post What was Behind the Change Healthcare Breach that Shook the Healthcare Industry?

article thumbnail

What's the Prescription for Cyber Resilience in Healthcare?

SecureWorld News

billing and electronic payment system operated by Change Healthcare, a big division of UnitedHealth Group, is only the latest, but maybe greatest, example. RELATED: Hospitals Seek Federal Help as Change Healthcare Ransomware Attack Disrupts Payments ] The attack has left hundreds, if not thousands, of providers all over the U.S.

article thumbnail

Inside Ireland’s Public Healthcare Ransomware Scare

Krebs on Security

On May 10, one of the hospitals detected malicious activity on its Microsoft Windows Domain Controller, a critical “keys to the kingdom” component of any Windows enterprise network that manages user authentication and network access. The number of appointments in some areas dropped by up to 80 percent.”

article thumbnail

“Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach

Malwarebytes

UnitedHealth Group has given an update on the February cyberattack on Change Healthcare , one of its subsidiaries. On Wednesday February 21, 2024, Change Healthcare experienced serious system outages due to the cyberattack. Enable two-factor authentication (2FA). Better yet, let a password manager choose one for you.

article thumbnail

New Report on Current and Emerging Cyber Threats to Healthcare

CyberSecurity Insiders

Health-ISAC, a nonprofit, private sector, member-driven organization, has released its annual cyber threat report on current and emerging threat activity in the healthcare industry, in collaboration with Booz Allen Hamilton Cyber Threat Intelligence.