Cybersecurity consultants faulted UHG for failure to deploy multifactor authentication MFA — a fundamental enterprise safety entry management — throughout Change Healthcare’s servers. UHG acquired Change Healthcare in October 2022.
Letter blames inexperienced safety management
Steven Martin, UHG’s chief data safety officer, was appointed in June 2023. “He had not labored in a full-time cybersecurity position earlier than he was elevated to the highest cybersecurity place at UHG,” in response to Wyden.
“Though Mr. Martin has a long time of expertise in know-how jobs, cybersecurity is a specialised subject, requiring particular experience,” Wyden stated.
