PYMNTS.com April 29, 2024
UnitedHealth Group CEO Andrew Witty will testify Wednesday (May 1) that hackers broke into its Change Healthcare unit’s systems through Citrix portal.
“On February 12, criminals used compromised credentials to remotely access a Change Healthcare Citrix portal, an application used to enable remote access to desktops,” Witty said in testimony posted on the website of the House Energy & Commerce Committee.
“The portal did not have multi-factor authentication,” Witty said in the testimony. “Once the threat actor gained access, they moved laterally within the systems in more sophisticated ways and exfiltrated data. Ransomware was deployed nine days later.”
Citrix did not immediately reply to PYMNTS’ request for comment.
It’s not clear which vulnerability was used by the hackers to access...
Today's Sponsors
Today's Sponsor