Internet American | think big, build small | prev Enzyme, Optimizely, Medtronic
San Francisco, CA
Joined August 2008
- Tweets16.4K
- Following5.9K
- Followers2.6K
- Likes147K
Pinned Tweet
Part 3 of the $UHC - Change Health Ransomware Attack
✳️Recent developments include DOJ antitrust probe into UnitedHealth and HHS investigation into cyber attack
✳️ Impact extends to companies like McKesson and CVS, disrupting operations
✳️ Lack of clear communication from UnitedHealth prompts calls for regulatory updates and transparency
✳️ Consequences highlight fragility of healthcare system, particularly for community hospitals and providers facing financial strains
✳️ Regulatory interventions, including post-event analysis and mandatory security measures, deemed necessary to prevent future incidents
✳️ Multiple federal agencies involved in enforcement actions to address breach comprehensively
✳️ Recapped earlier episodes for audience members that missed parts 1 and 2:
ransomware attack on UnitedHealth, encrypting patient records and demanding ransom allegedly paid via Bitcoin; possibly retaliation against US government threats; disruptions in healthcare services since February 20th;
Part 2 on the UHG/Change ransomware attack.
Timeline of Events:
📅 February 19: ConnectWise discloses limited details of Screen Connect vulnerability.
📅 February 20: ConnectWise deploys hotfix, detection guidance released.
📅 February 21: First wave of ConnectWise related exploits reported in the wild, Sigma HA publishes detection rules.
📅 February 22: ConnectWise suspects non-patched versions are still vulnerable.
📅 March 03: ALPHV's bitcoin wallet drained of supposed $22M from United.
📅 March 04: "Notchy," ALPHV affiliate, airs grievances on RAMP. ALPHV makes a "good game" post. ALPHA announces sales of their ransomware suite for $5M. ALPHA site displayed with "seizure" announcement.
📅 March 05: Health tech leaders call for action to support small clinics, rather than just large hospital systems. HHS issues a statement offering support regarding the cyberattack on Change Healthcare, including the removal or relaxation of prior authorization requirements. HHS Statement Link
📅 March 06: RAMP forum mod awards "Notchy" win in grievance.
📅 March 07: United formally confirms their systems are being rebuilt, and that e-pharmacy and insurance claims processes are not yet resolved.
📅 March 8th: Optum employees report their IT systems are still being integrated, while UHG/Optum execs face criticism for shaming employees over bad IT hygiene.
📅 March 15: UnitedHealthcare and Change Healthcare announce that claim payments will be restored.
Discussion Points for Part 2:
✳️ Analysis of the ConnectWise vulnerability disclosure and response.
✳️ Impact assessment of the ConnectWise-related exploits in the wild.
✳️ Speculation on ALPHV's motives and tactics following the draining of their bitcoin wallet.
✳️ Insights into the grievances aired by "Notchy" and the response within the hacker community.
✳️ Examination of ALPHA's announcement regarding the sale of their ransomware suite and the implications for cybersecurity.
✳️ Updates on United's system rebuilding efforts and the ongoing disruptions to e-pharmacy and insurance claims processes.
✳️ Discussion on the challenges faced by Optum employees as they navigate IT system integration, coupled with the criticism faced by UHG/Optum executives for their approach to addressing IT hygiene issues among staff.
✳️ Analysis of the support offered by HHS in response to the cyberattack on Change Healthcare, including the removal or relaxation of prior authorization requirements.
Noting the rampant speculation on social media regarding terrorism and conspiracy theories about the motivations and true actors behind the cyberattack.
Highlighting the anticipated restoration of claim payments by UnitedHealthcare and Change Healthcare on March 15.
Additional Fact:
📊 Change Healthcare processes 15 billion transactions annually and supports 6,000 pharmacies, underscoring the significance of the cyberattack's impact on healthcare infrastructure.
Ebola is the journeyman virus
Will this be its shot to grip the entire world in fear?
Officials warn 'unprecedented' disease outbreak is 'very dire': 'All countries should know that they are not safe' trib.al/twjqIKe
every materialist explanation for consciousness is so flat and uncompelling that virtually no lay person can recall hearing such an idea
the chasm between the first-person sense of "i" and our collective understanding of what that is may be growing, rather than shrinking
🚨 Interesting secondary effect of GLP-1s: increased DIVORCE!
It’s not the drug but the weight loss, since bariatric surgery pts report the same thing:
“before surgery I was invisible, but now people notice me and I get attention from the opposite sex.”
archive.ph/aKOxy
peptide accounts tend to out themselves as sourcing the lowest quality and least validated supply.
as if paying $10 for something you inject into yourself is the ideal price, and a dollar more is grifting.
again, pay a fair price to a company your spouse can sue for $10M or more.
a most improbable turn of events
i’m either blessed or being punked for a third time in two decades.
EU is innovating by taxing revenue that doesn't exist
brilliant.
So, the French socialists, and Parliament members just voted a tax, that they don’t understand, which would cost VideoLAN more than 1 million euro per year.
They are probably the most clueless politician on Earth? And they claim they want technological sovereignty…
@LaurentLhardit
there is a need for a canonical CRM data model (npm: @foor/crmtypes)
small thing, but if you built connectors around it, anyone could slap it into their app and obviate the need to buy or build instantly.
There is no formal surveillance system for these compounds
Ry ⭐ (h/acc) retweeted
Machines are tools, not persons. Today, some propose granting these systems rights, or even legal personhood. Such an approach risks obscuring human responsibility and leaving those who suffer harm to confront a faceless entity.
Cool government 👍
A felon suspected of a string of terrifying hot-prowl burglaries across San Francisco’s toniest neighborhoods had just been released from a short jail stint after threatening to shoot a man. sfpublicsafety.news/hot-prow…
2012 was crazy
like, do you mean I had to pretend I enjoyed Catan on every job interview or new friend hang?
medieval supply chain ass game
Bro’s first midterm
By all reports, something big is going down.
You got your finger on the pulse of the world, @grok, what do you think is happening?
there is an idea for a Boomer Chrome extension.
after they type something stupid, it renders the quote into a NYTimes headline.
and they have to choose to continue sending.
it would save corporations billions $
