UnitedHealth Data Breach Exposes Information on 100 Million+ Individuals

On February 12, unauthorized individuals exploited compromised credentials to access a Citrix portal belonging to Change Healthcare. This application facilitates remote desktop access and lacked multi-factor authentication safeguards. After gaining entry, the perpetrators maneuvered through the systems using advanced techniques, ultimately extracting data. The deployment of ransomware occurred nine days following the initial breach.

Source link