UnitedHealth’s Change Healthcare subsidiary paid $22 million in ransom to the attackers who broke into its systems in February, according to Congressional testimony today. And it revealed that the scope of the breach could be much larger than anyone imagined — even as it remains unclear whether the ransom payment secured the data from being used in follow-on attacks.
UnitedHealth’s CEO Andrew Witty testified before the US House Energy and Commerce Committee today after weeks of disruption at the nation’s largest health insurer, during which a series of concerning revelations about the breach came to light.
