Change Healthcare hackers took advantage of Citrix vulnerability to break in, CEO says

Change Healthcare’s IT systems were hacked due to a vulnerability in a Citrix product. Attackers used a compromised username/password combo to enter the company’s portal, which lacked multi-factor authentication at the time. In February, a ransomware attack forced the shutdown of parts of the company’s infrastructure. Notorious ransomware vendor, ALPHV (BlackCat), allegedly stole 4TB of customer data, demanding $22m in ransom.