UnitedHealth leaders 'should be held responsible' for installing inexperienced CISO, senator says

Senator Ron Wyden has called for accountability over UnitedHealth Group's handling of a ransomware attack on Change Healthcare, criticizing the company for having an inadequately experienced Chief Information Security Officer and for failing to maintain essential cybersecurity measures like multi-factor authentication. Wyden's letter to the Federal Trade Commission (FTC) and Securities and Exchange Commission (SEC) compares the incident to the SolarWinds breach and argues that UnitedHealth's executives and board should be held responsible for these lapses, which affected millions of patients and providers. He urges regulatory action in line with previous FTC and SEC cases addressing cybersecurity failures in other companies.

Opens on therecord.media