{"id":3227,"date":"2024-04-23T13:44:00","date_gmt":"2024-04-23T18:44:00","guid":{"rendered":"https:\/\/www.darkreading.com\/cyber-risk\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update"},"modified":"2024-04-23T13:44:00","modified_gmt":"2024-04-23T18:44:00","slug":"back-from-the-brink-unitedhealth-offers-sobering-post-attack-update","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/04\/23\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update\/","title":{"rendered":"Back from the Brink: UnitedHealth Offers Sobering Post-Attack Update"},"content":{"rendered":"<div class=\"media_block\"><a href=\"https:\/\/i0.wp.com\/eu-images.contentstack.com\/v3\/assets\/blt6d90778a997de1cd\/bltffd71013a94eb62e\/65c3d52c24aaac040a0e2d1b\/Healthcare_Yuri_Arcurs_Alamy.jpg?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?w=640&#038;ssl=1\" class=\"media_thumbnail\"><\/a><\/div>\n<div><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?w=640&#038;ssl=1\" class=\"ff-og-image-inserted\"><\/div>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">UnitedHealth Group, in another unfortunate turn of events, has discovered that a large amount of its customers&#8217; personal data was compromised by two recent cyberattacks, from which it is still recovering.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">A data review is ongoing, and the company says it expects it to take several more months of analysis before it has &#8220;enough information \u2026 available to identify and notify impacted customers and individuals.&#8221; However, the company has not seen personal information like doctors&#8217; charts or full medical histories among the impacted data it&#8217;s examined so far.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Change Healthcare, a subsidiary of UnitedHealth Group, <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/blackcat-goes-dark-again-reportedly-rips-off-change-healthcare-ransom\" rel=\"noopener\">fell victim to a ransomware attack on Feb. 23<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">, ultimately leading to the company deciding to pay off the&nbsp;BlackCat\/ALPHV ransomware affiliate&nbsp;responsible, after the US healthcare system fell into disarray.&nbsp;<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/cybersecurity-operations\/hhs-plans-for-cyber-one-stop-shop-after-change-healthcare-attack\" rel=\"noopener\">enormity of the attack<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> gained the attention of those in Washington, such as&nbsp;chairman of the Senate&#8217;s Homeland Security and Governmental Affairs Committee, Sen. Gary Peters (D-Mich.), who encouraged HHS to take whatever steps necessary to prevent such an attack from ever happening again.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">However, it didn&#8217;t stop there. The company <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/round-2-change-healthcare-targeted-second-ransomware-attack\" rel=\"noopener\">reportedly experienced another attack<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> at the hands of RansomHub, which allegedly stole 4TB of company information, including financial data.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Now, in the wake of these new discoveries in its ongoing investigation and analysis, the company reported that many of its affected systems are on their way to being fully operational again: 99% of pre-incident pharmacies are able to process claims, medical claims are flowing at near-normal levels, and payment processing is at 86% of pre-incident levels. UnitedHealth Group also reports that it is in communication with law enforcement and regulators and is providing resources for impacted customers at&nbsp;<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.unitedhealthgroup.com\/ns\/health-data-breach.html\" rel=\"noopener\">http:\/\/changecybersupport.com<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">.&nbsp;<\/span><\/p>\n<p><a href=\"https:\/\/www.darkreading.com\/cyber-risk\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>UnitedHealth Group, in another unfortunate turn of events, has discovered<\/p>\n","protected":false},"author":12,"featured_media":3228,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-3227","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=1800%2C1154&ssl=1",1800,1154,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=300%2C192&ssl=1",300,192,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=640%2C410&ssl=1",640,410,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=640%2C410&ssl=1",640,410,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=1536%2C985&ssl=1",1536,985,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=1800%2C1154&ssl=1",1800,1154,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=1024%2C656&ssl=1",1024,656,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/back-from-the-brink-unitedhealth-offers-sobering-post-attack-update.jpg?fit=1800%2C1154&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3227","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=3227"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3227\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/3228"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=3227"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=3227"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=3227"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}