UnitedHealth says data of 100M stolen in Change Healthcare hack

#1

Post by sandwichsphinx » Fri, Oct 25, 2024, 3:58 AM UTC

UnitedHealth says data of 100M stolen in Change Healthcare hack
bleepingcomputer.com

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#2

Post by kevinmershon » Fri, Oct 25, 2024, 4:29 AM UTC

So would this count as 1 instance or 100M instances of HIPAA violations? Last I checked the penalty is $50k per violation...

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#3

Post by whoitwas » Fri, Oct 25, 2024, 4:38 AM UTC

kevinmershon wrote: post #2

So would this count as 1 instance or 100M instances of HIPAA violations? Last I checked the penalty is $50k per violation...

Seriously. From what I've learned United needs the axe more than many corporations. Somewhere below Nestle, but above BP maybe?

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#4

Post by nashashmi » Fri, Oct 25, 2024, 4:42 AM UTC

kevinmershon wrote: post #2

So would this count as 1 instance or 100M instances of HIPAA violations? Last I checked the penalty is $50k per violation...

First it would have to be proven that data is leaked. Each proven leak is worth $50k. Mass leak is a compromise of data security. And that comes under a different classification.

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#5

Post by mrbluecoat » Fri, Oct 25, 2024, 4:48 AM UTC

> an expected $2.45 billion

Am I reading that ransom payout correctly? Or are "losses" divided among other things?

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#6

Post by azinman2 » Fri, Oct 25, 2024, 5:17 AM UTC

At what point can we sue, especially if basic security practices like 2FA are not enabled?

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#7

Post by Evidlo » Fri, Oct 25, 2024, 5:19 AM UTC

Are they obligated to notify specific customers? How can I know if my data was in the hack?

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#8

Post by mlsu » Fri, Oct 25, 2024, 5:26 AM UTC

I really don't understand how this level of consolidation has been allowed in the healthcare market. I was affected by this, couldn't get prescriptions filled for 4 days. Turns out I'm not alone -- 100m people? That's 1/3rd of America's population!

There is no competition in the marketplace. We need to either nationalize them or break them up. These ransomware groups are small-time compared to a nation-state adversary in wartime. At this point it's a national security issue.

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#9

Post by albert_e » Fri, Oct 25, 2024, 5:28 AM UTC

[flagged]

Re: UnitedHealth says data of 100M stolen in Change Healthcare hack

#10

Post by AStonesThrow » Fri, Oct 25, 2024, 5:48 AM UTC

albert_e wrote: post #9

[flagged]

Definitely: all the other text in that image is AI-garbled. You can also tell, because the company name is not correctly stylized, nor is the correct font used, nor is their logo visible here. This is just a 100% fake AI building with some low-effort text slapped on afterwards.

Why did they not actually bother to use a photograph of UHC's building? What did you expect from a site called "bleepingcomputer dot com"?