Chief Healthcare Executive May 1, 2024
Lawmakers criticized Andrew Witty for insufficient cybersecurity protection and the lack of clarity on how many have been affected by the data breach.
Lawmakers asked tough questions of UnitedHealth Group CEO Andrew Witty regarding the Change Healthcare cyberattack and the company’s response to the breach.
Witty testified before the Senate Finance Committee Wednesday morning about the ransomware attack, which has been called the most damaging cyberattack in the healthcare sector in U.S. history.
Witty told lawmakers that the company paid a ransom of $22 million, on his order. He also acknowledged that the attack involved a Change Healthcare server that did not require multi-factor authentication. Such authentication is increasingly considered a basic step in protection, cybersecurity analysts say. With multi-factor...