This is what I got this morning when I tried to log into my (previous) #healthInsurance company's website (which uses #Optum's "Healthsafe ID" for authentication) after 9am to submit a claim from last month (before we switched to new insurance).
It's of course a -show that Optum can't keep a mission-critical website up during business hours, and a double -show when they've got a bogus "test" email address displayed in the error message.
Par for the course for Optum, eh?
#changeHealthcare

https://www.europesays.com/1814744/ 1,000,000 Patients Exposed In Healthcare Provider Data Breach #ChangeHealthcare #CommunityHealthCenter #ComputerSecurity #cybsersecurity #Data #DataBreach #Hacker #hipaa #PatientRecords #PHI #UnitedHealthGroup

Sharp-eyed @zackwhittaker caught this one:

UnitedHealth hid its Change Healthcare data breach notice for months:

https://techcrunch.com/2025/01/15/unitedhealth-hid-its-change-healthcare-data-breach-notice-for-months/

Let's make sure Zack's reporting gets indexed.

$UNH’s #ChangeHealthcare unit paid a big ransom—its IT was as weak as a kitten.

February’s huge #UnitedHealth #ransomware hack is now confirmed as the U.S.’s biggest ever #healthcare breach. As you might recall, the scrotes got in via simple credential reuse—there was no #MFA to stop them.

Change Healthcare? More like Change CISO, amirite? In #SBBlogwatch, we wonder why Steven Martin is still in post. At @TechstrongGroup⁠’s @SecurityBlvd: https://securityboulevard.com/2024/10/unitedhealth-change-healthcare-100m-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc

Change Healthcare updated its report to #HHS this week, changing its "marker" report in July of 500 patients affected to 100,000,000 patients affected.

It's not clear to me whether that is the final report on the number affected or if it is just an updated interim figure with a lot more to come. I've emailed Change to inquire and will update this if I get a reply.

In the meantime, if you need a refresher on what happened with this incident and the current situation with the incident, read @zackwhittaker report on @TechCrunch

Happy #ChangeHealthcare #breachNotification to all who celebrate!
We got ours yesterday. When did you get yours?
There's too much for alt text, so I've posted a PDF with text at https://drive.google.com/file/d/1TcFGL-MuuMArhCISNM5MmT3yvtYpkGr-/view.
(There are 4 more pages in the reply.)
This is the worst breach notification I've seen in a long time.
Of note: because Change Healthcare does everything badly, you have to call them to get the free credit monitoring; there's no way to do it online.
#infosec #privacy #cybersecurity #breach

My #HealthInsurance company, #GEHA, was impacted by the #ChangeHealthcare #Ransomware attack; they were unable to send out EOBs or reimbursement checks for several months and had to implement a replacement process from scratch.
EOBs and checks started flowing again eventually via the new process. Alas, there's a problem: there's a bug in the system, and they're sending out some duplicate EOBs *and duplicate checks*.
How much do you suppose this will cost them?

#UnitedHealth's 'egregious negligence' led to #ChangeHealthcare #ransomware infection
'I'm blown away by the fact that they weren't using MFA'
The #cybersecurity practices that led up to the stunning Change Healthcare ransomware infection indicate "egregious negligence" on the part of parent company UnitedHealth, according to Tom Kellermann, SVP of cyber strategy at Contrast Security.
https://www.theregister.com/2024/05/08/unitedhealths_egregious_negligence/

The good news: 2 of my dependents hit their deductible on our High-Deductible Health Plan, so the insurance company will now start paying for most of their recurring expenses (we still have to pay copays, up to the out of pocket max, which we probably won't hit).
The bad news: the insurance company was impacted by the #ChangeHealthcare breach, and they _just_ figured out how to send out checks themselves, so they have to work through months of backlog before we'll see any money.
#HealthInsurance

Health care giant comes clean about recent hack and paid ransom - Enlarge (credit: Getty Images)

Change Healthcare, the health c... - https://arstechnica.com/?p=2020827 #changehealthcare #prescriptions #ransomware #security #biz&it

If you missed the House committee hearing on the Change Healthcare attack, it's up on YouTube at https://www.youtube.com/watch?v=iLjcOzmSmDY

Neither Change Healthcare nor UntiedHealth Group were testifying at this one (it was by invite only). They had reportedly briefed the committee earlier.

Senate hearing should be on April 30 and it sounds like UHG CEO WItty will be the only one scheduled to testify so far.

#Ransomware gang starts leaking stolen #ChangeHealthcare data
Screenshots seen by Axios suggest hackers have stolen a trove of sensitive information, including patients' #hospital bills, financial documents and company contracts.
There's currently a countdown on RansomHub's dark-web leak site threatening to publish data on Friday.
Change Healthcare, provides billing support to #pharmacies and #insurers, has been cleaning up fallout from a ransomware attack since February.
https://www.axios.com/2024/04/16/change-healthcare-data-leak-ransomware

Ransomware gang publishes part of stolen Change Healthcare records
#ransomware #cyberattack #databreach #privacy #dataprivacy #cybersecurity #infosec #ChangeHealthcare

https://cybernews.com/news/ransomware-gang-ransomhub-change-healthcare/?utm_source=mastodon&utm_medium=social&utm_campaign=cybernews&utm_content=post

"To be clear, we are still determining the content of the data that was taken by the threat actor, including any PHI/PII." #uhg #changehealthcare #ransomware

https://www.unitedhealthgroup.com/ns/changehealthcare.html

Welp, I'd thought my family wasn't impacted by the #ChangeHealthcare attack, but it turns out it's why my #healthInsurance company isn't mailing out EOBs or displaying them on their website. "#GEHA is actively working on a contingency plan to restore both provider and member payment processing as well as access to impacted member and provider documents," they say. No ETA given for when that contingency plan will take effect. *sigh* #infosec #cybersecurity #ransomware #healthcare

Amid paralyzing ransomware attack, feds probe UnitedHealth’s HIPAA compliance - Enlarge (credit: Getty | Bloomberg)

As health systems around t... - https://arstechnica.com/?p=2010259 #changehealthcare #unitedhealth #cyberattack #ransomware #science #health #policy #hipaa #hhs

‘Return What You Stole and Be a Man With Dignity’
https://prospect.org/health/2024-03-11-change-unitedhealth-ransomware-pharmacies/ #ChangeHealthcare #UnitedHealth #hack #Ransomware #attack #responsibility #cheating