UHG says it’s rebuilding Change Healthcare with cloud-based security

UnitedHealth Group CEO Andrew Witty testified before the House and Senate about the February cyberattack on its subsidiary Change Healthcare. Witty stated that the absence of multi-factor authentication on a legacy server enabled the attack. The hackers stole personally identifiable information and protected health information for about a third of Americans. Witty apologized and stated that the company is working to improve its cybersecurity. UnitedHealth paid a $22 million Bitcoin ransom to the attackers to restore operations. The attack has caused significant financial strain for small healthcare providers.