US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO

Senator Ron Wyden urged the FTC and SEC to investigate UnitedHealth Group after a ransomware attack—linked to ALPHV and described in CEO testimony—forced UHG to rebuild its infrastructure and may have impacted around one-third of Americans; Wyden criticized the appointment of a CISO without prior security-specific experience and pointed to missing controls (notably absent MFA on the compromised remote access server), poor network segmentation, and inadequate threat hunting as enabling the severe breach.