Federal Authorities Say UnitedHealth Can Notify Victims of Massive Data Breach

Decision spares hospitals and healthcare providers from time-consuming and expensive work
Read the full article in The Wall Street Journal Pro here:
Pulled quotes from Health-ISC Board Member, Anahi Santiago and Health-ISAC Chief Security Officer, Errol Weiss:
Having UnitedHealth notify victims will benefit patients, said Anahi Santiago,
chief information security officer at ChristianaCare, a hospital system based
in Delaware.
With one company handling notification, patients will be spared from
receiving multiple letters from different places, she said.
Plus, hospitals and doctors don’t know what personal data was
compromised or which patients were affected, so they wouldn’t be able to
answer follow-up questions about the breach, said Errol Weiss, chief security
officer at the Health Information Sharing and Analysis Center (Health-ISAC), a nonprofit
that helps healthcare groups exchange information about cyber threats. Only
UnitedHealth can identify who was affected and what the risks are to those people, he said.
Read the full article in The Wall Street Journal Pro here:
- Related Resources & News
- Healthcare Heartbeat 2024 Q4
- Health-ISAC Hacking Healthcare 2-19-2025
- Podcast: Reflecting on the Change Healthcare cyberattack
- Senate Confirms Trump Pick RFK Jr. to Lead HHS
- The Alarming Backdoor Hiding in 2 Chinese Patient Monitors
- Health-ISAC 2025 Health Sector Cyber Threat Landscape
- How Health Systems Manage Security in the Cloud
- Change Healthcare Attack a Wake-up Call for the Industry
- Five High-Impact Cyberattacks Healthcare Industry Should Avoid in 2025
- Health-ISAC Hacking Healthcare 2-11-2025