2

UnitedHealthCare CEO Says 'Maybe a Third' of US Citizens Were Affected By Recent...

 2 weeks ago
source link: https://yro.slashdot.org/story/24/05/01/1959251/unitedhealthcare-ceo-says-maybe-a-third-of-us-citizens-were-affected-by-recent-hack
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

UnitedHealthCare CEO Says 'Maybe a Third' of US Citizens Were Affected By Recent Hack

Follow Slashdot stories on Twitter

binspamdupenotthebestofftopicslownewsdaystalestupid freshfunnyinsightfulinterestingmaybe offtopicflamebaittrollredundantoverrated insightfulinterestinginformativefunnyunderrated descriptive typodupeerror

Sign up for the Slashdot newsletter! OR check out the new Slashdot job board to browse remote jobs or jobs in your area

Do you develop on GitHub? You can keep using GitHub but automatically sync your GitHub releases to SourceForge quickly and easily with this tool so your projects have a backup location, and get your project in front of SourceForge's nearly 20 million monthly users. It takes less than a minute. Get new users downloading your project releases today!
×
An anonymous reader shares a report: Two months after hackers broke into Change Healthcare systems stealing and then encrypting company data, it's still unclear how many Americans were impacted by the cyberattack. Last month, Andrew Witty, the CEO of Change Healthcare's parent company UnitedHealth Group, said that the stolen files include the personal health information of "a substantial proportion of people in America." On Wednesday, during a House hearing, when Witty was pushed to give a more definitive answer, testifying that the breach impacted "I think, maybe a third [of Americans] or somewhere of that level."
  • I'll just change my complete medical history to make whatever records they stole useless and irrelevant.
  • At this point just make all records public.

    • Re:

      "You have zero privacy anyway. Get over it." Scott McNealy, 1999

  • Hopefully hackers will finally schedule me a prostate exam.

      • Re:

        They're a pain in the *ss.
  • I'm completely sure United Healthcare has been punished [youtube.com] for this already. Aren't we supposed to be arguing red vs blue right now?
      • Re:

        You actually believe this ? United Health is a Private Company. Based upon your comment, the the people you support, the GOP, are the ones which forced these private companies on medicare people. Also, if you were born before 1955, you do not use these companies but regular Medicare which the benefits for those people are better than what these forced upon us private companies offer.

        • Medicare wasnâ(TM)t a GOP policy, fixing it seems to always fall on the GOP and taking away benefits has always been a political poison pill regardless of whether it is actually affordable, so a middle ground is letting companies do Medicare but then you get these kinds of monstrosities that handle the information for virtually all citizens (because the governments need to track and forecast how many billions to pump into the system or else it will go broke).

          If you like government run healthcare so muc

    • Re:

      > I'm completely sure United Healthcare has been punished [youtube.com] for this already. Aren't we supposed to be arguing red vs blue right now?

      HAAAR!.. Makes you wonder if billg spend some of that $149B on security, we wouldn't be in this mess.
    • Re:

      Well, at 1/3 of the population, it can happen two more times.

  • This is why no company should be allowed to grow so big that it has material private information on a third of the country.

  • When do I get my 7 years of free Credit monitoring ? Now back to reality, I am anxiously waiting for my 1.15 USD settlement check while my info is on tor being sold for much more.
  • I gave up on the American medical system a decade or more ago. It's price gouges the shit out of everyone, even those that don't participate, by mandating insurance, which you must purchase from a for-profit company. Said company then gets final say over whether you need treatment, not your doctor. And they have the right to approve coverage, allow the procedure, then "change their mind" after the fact leaving you footing the bill. Fuck every last individual involved in that scam pile of bullshit.

    Which brin

      • Re:

        You don't need to own a car if you don't want to. Automotive insurance is only required if you own and operate a vehicle and not all forms of insurance are mandated. There are plenty of people who don't need to own a car and can use taxis on the odd occasion they would need one and public transport options aren't available.

        Medical insurance (and the system as well) would probably work better if it was limited to expensive emergency care. Car insurance doesn't cover oil changes or other mundane maintenanc
  • We'll just raise your premiums by another 30% this year.

  • As someone not in the computer security field, I can't help but notice there's a new massive leak about once a week or so, it seems. Is it impossible to keep data secure, or are these leaks just evidence of incompetence/mismanagement on the part of crappy companies? Are there companies doing it right that we just never hear about, or does it really happen to all of them eventually?
    • You can't measure good security. It's a cost to companies but they see no benefit to it. Change Healthcare took a chance and they lost but they won't lose much money and everyone else who has bad security but wasn't breached didn't lose anything at all. Most companies, (and most security experts) don't even understand where to start with security. You start by knowing all the things you need to protect. Most militaries can't even do that. So companies just rely on security in depth and play whack a mo
  • ... as well as an asset. How about:

    * If you have data that can be use for identity theft, and it leaks, you owe a per-person-exposed fine.
    * In the absence of reliable records, all unencrypted data held by the company is assumed to have leaked.
    * Fines are increased if if can be shown the company knew about the leak for more than 30 days before admitting it publicly.

    With something like this hanging over them, companies:
    * Might think twice about keeping data they don't really need,
    * Might encrypt data at rest


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK