Change Healthcare Hack

Some details of the Change Healthcare hack have leaked. Access via compromised credentials on a remote access system - that didn’t have MFA. Dwell time nine days.

(Total cost for this they are estimating at $1.35 - $1.6 billion, $872m already realised)

“Lawmakers have raised questions about the cyber risks associated with a handful of healthcare companies holding dominant positions”

There’s that thing about having all your eggs in one basket again…