Federal Authorities Say UnitedHealth Can Notify Victims of Massive Data Breach

Decision spares hospitals and healthcare providers from time-consuming and expensive work
Read the full article in The Wall Street Journal Pro here:
Pulled quotes from Health-ISC Board Member, Anahi Santiago and Health-ISAC Chief Security Officer, Errol Weiss:
Having UnitedHealth notify victims will benefit patients, said Anahi Santiago,
chief information security officer at ChristianaCare, a hospital system based
in Delaware.
With one company handling notification, patients will be spared from
receiving multiple letters from different places, she said.
Plus, hospitals and doctors don’t know what personal data was
compromised or which patients were affected, so they wouldn’t be able to
answer follow-up questions about the breach, said Errol Weiss, chief security
officer at the Health Information Sharing and Analysis Center (Health-ISAC), a nonprofit
that helps healthcare groups exchange information about cyber threats. Only
UnitedHealth can identify who was affected and what the risks are to those people, he said.
Read the full article in The Wall Street Journal Pro here:
- Related Resources & News
- Potential Terror Threat Targeted at Health Sector – AHA & Health-ISAC Joint Threat Bulletin
- New Cybersecurity Policies Could Protect Patient Health Data
- CyberWire Podcast: PHP flaw sparks global attack wave
- Health-ISAC Hacking Healthcare 3-14-2025
- HSCC Aiming to Identify Healthcare Workflow Chokepoints
- New Healthcare Security Benchmark Highlights Key Investment Priorities and Risks
- Are Efforts to Help Secure Rural Hospitals Doing Any Good?
- CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts
- 2024 Health-ISAC Discussion Based Exercise Series After-Action Report
- Cobalt Strike takedown effort cuts cracked versions by 80%