Scourge · February 21 2024

The Scourge of Change Healthcare

Chronicle

On 21 February 2024 ALPHV/BlackCat affiliates, using stolen credentials on a Citrix portal that lacked multi-factor authentication, deployed ransomware in the systems of Change Healthcare, a UnitedHealth subsidiary that handles a huge share of US healthcare transactions. For weeks claims processing and pharmacy services were disrupted nationwide: many doctors and facilities went unpaid and many patients struggled to obtain their prescriptions. In the end the health data of about 190 million people was reported affected, the largest US healthcare breach on record.

Lesson learned

It revealed how a single intermediary can be a breaking point for an entire health system, and made MFA on remote access a subject for congressional hearings.

Prayer of reparation

For the patients who waited for medicines and care, and for the doctors, pharmacists and small practices left without support, we ask relief and justice. Let those who keep health data protect it with the care owed to people. Amen.

How it is remembered

Remembered by requiring MFA on all remote access, without exception, preparing alternatives for essential health services and reducing dependence on a single intermediary.