"The accuracy of UHG's cyberattack attribution remains unclear, as cybersecurity researchers have not previously linked the BlackCat gang to a nation state or government."
https://news.yahoo.com/ransomware-attack-blamed-change-healthcare-192647680.html
Here's the most confirmation I've found. Guess who uses ConnectWise?!
https://h-isac.org/change-healthcare-optum-network-connectivity-and-additional-recommendations/
Note the keyword in the 8-K filing "suspected"
On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor.
Was just debating this today.
Mandiant was confirmed as the outside IR retainer for the investigation, so if they were the ones who slapped the nation-state attribution label on I’d more so believe it and then lean away from the ransomware-as-a-service theory. Mandiant usually know better than to toss the state-sponsored label around or mark financially motivated groups like ALPHV as such.
But if that was UHC’s own verbiage, not a good look. May have picked it to better rationalize the additional outages done for mitigation purposes. Especially since it was in an Edgar report. Investors be big mad otherwise.
Ooooooh, so that's what happened... Blackcat ransomware infected us through contracting vendor hardware. Now it all makes sense.
Lie? A UHG CEO who was found guilty of fraud (not the first UHG CEO to have accomplished such heights!), hiring CISO's that have no security background, and a person running IT who is more about making Taylor Swift videos and fanboys over IBM every chance he gets than actually accomplishing something (other than offshoring as much as he can). The place is run by incompetance.
love it. the post below.
They lied about it because they don't want the truth of their golden child Wipro having done the final needful.
Clearly Ruski