Stunning Admission By United HealthGroup CEO
It was the roasting that was expected, with both sides of the aisle attacking Andrew Witty when he appeared on Capitol Hill. The United HealthGroup CEO made a stunning admission when he said that Change Healthcare had legacy architecture and technology based largely on internal data centers. It says it is rebuulding all of it on a cloud-based, modern infrastructure. This alone substantiates a lack of business continuity and disaster recovery readiness. In the last few days, United also admitted that simple multi-factor authentication was not in place and that is how the cyber criminals got into the Change platforms.
The testimony adds to my theory that when massive consolidation occurs, technology is not modernized and as I call it “spaghetti-ed together.” The testimony will lead to additional scrutiny of United, a review of vertical integration and consolidation in healthcare, as well as more lawsuits and eventual fines for United.
See my blog and podcast on the Change debacle: https://www.healthcarelabyrinth.com/17-what-happened-when-change-healthcare-suffered-a-major-cyberattack-and-what-will-it-mean-to-the-broader-healthcare-system-moving-forward/ and https://www.healthcarelabyrinth.com/the-change-healthcare-cyberattack-what-it-is-and-its-implications/
Additional articles: https://www.fiercehealthcare.com/payers/too-big-fail-consolidation-concerns-loom-over-hearing-change-healthcare-cyberattack and https://www.modernhealthcare.com/politics-policy/unitedhealth-andrew-witty-change-healthcare-hearings and https://www.medpagetoday.com/washington-watch/washington-watch/109918 and https://www.beckershospitalreview.com/finance/a-crisis-of-your-creating-unitedhealth-ceo-grilled-by-congress-on-cyberattack.html
(Some articles may require a subscription.)
#changehealthcare #cyberattacks #unitedhealthcare
https://thehill.com/homenews/4635480-unitedhealth-ceo-heat-cyberattack-senate/