World
Nebraska Sues UnitedHealth Unit Over 100 Million Patient Data Breach – Slashdot
Nebraska’s attorney general has sued Change Healthcare over a massive data breach that exposed sensitive medical information of more than 100 million Americans following a February ransomware attack. The lawsuit alleges the UnitedHealth-owned company failed to implement basic security measures, including multi-factor authentication, allowing hackers to breach its systems using credentials from a customer support employee that were posted on Telegram.
The Russian-speaking ALPHV ransomware group accessed personal health records, financial data and treatment information across Change Healthcare’s poorly segmented network, according to the complaint filed by Attorney General Mike Hilgers.