Last month, Andrew Witty, the CEO of Change Healthcare's parent company UnitedHealth Group, said that the stolen files include the personal health information of 'a substantial proportion of people in America.'
On Wednesday, during a House hearing, when Witty was pushed to give a more definitive answer, testifying that the breach impacted 'maybe a third [of Americans] or somewhere of that level.'
Witty said he was reluctant to give a more precise answer as the company is still investigating the breach to determine the exact number of affected individuals.
According to Witty's testimony, the hackers 'used compromised credentials to remotely access a Change Healthcare Citrix portal,' which lacked multi-factor authentication, a key security measure.
[
add
]
[
|
|
...
]