UnitedHealthcare CEO says ‘maybe a third’ of US citizens were affected by recent hack

Two months after a ransomware attack on Change Healthcare (part of UnitedHealth Group), the company reports stolen and encrypted data potentially affecting a substantial portion of Americans—CEO testimony estimated around a third of the population. The attackers used compromised credentials to access a Citrix portal that lacked multi-factor authentication, and the company is still investigating the full scope and preparing notifications.