Senators Demand Answers on Cybersecurity Agency’s Response to Ransomware Attack on Insurance Giant
A group of US senators, led by Senator Elizabeth Warren, has sent a letter to the federal government’s lead cybersecurity agency requesting information on its response to the ransomware attack on an insurance company in February. The attack targeted Change Healthcare, a unit of UnitedHealth Group Inc., resulting in billions of dollars of payments being disrupted and patient medical data being stolen. The senators are seeking details on CISA’s role in addressing the breach and a broader understanding of the risks posed by ransomware and the agency’s efforts to combat it.
In their letter, the senators questioned how CISA collaborated with law enforcement agencies to address the hack, what information was provided to UnitedHealth regarding the BlackCat hacker group responsible for the breach, and how often such attacks occur. They also asked about CISA’s efforts to establish a warning system and how ransoms can be paid without compromising patient data. The attack on Change Healthcare exposed vulnerabilities that put an entire industry at risk. The breach disrupted payments and jeopardized the financial stability of some clinics, potentially impacting UnitedHealth’s profits by up to $1.6 billion.
Senator Warren emphasized the importance of understanding the cybersecurity landscape in light of this breach. Joining her were Senators Bill Cassidy (Louisiana Republican) and Richard Blumenthal (Connecticut Democrat). A spokesperson for CISA declined to comment on the matter. The letter was sent just before top executives from UnitedHealth were scheduled to address the attack in hearings before Congress.
