[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}” custom_padding=”||15px|||”][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2025\/09\/NCSS-3397-Bulletin-Header-Footer-Header-Graphic-1600×350-Compressed.png” title_text=”NCSS-3397-Bulletin-Header-Footer-Header Graphic 1600×350-Compressed” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
Published: April 19, 2024<\/em><\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Our new bulletin Cyber Threat Watch<\/em><\/strong> has been created to help small businesses stay up to date on the latest threats, news, and events affecting their business. The content has been curated to make cybersecurity easy and accessible for both technical and nontechnical readers.<\/span><\/p>\n [\/et_pb_text][et_pb_heading title=”Featured Cyber Incident \u2014 Change Healthcare Ransomware Attack” _builder_version=”4.27.4″ _module_preset=”default” title_level=”h2″ title_font=”|600|||||||” title_text_color=”#00688E” global_colors_info=”{}”][\/et_pb_heading][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2025\/09\/AdobeStock_541911884-scaled.jpeg” title_text=”Ransomware alert, 2d illustration ransomware computer virus, technology abstract background. Data Security, Data theft” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_3_text_color=”#00688E” global_colors_info=”{}”]<\/p>\n As disclosed on February 21, 2024, Change Healthcare, a leading healthcare technology company, has been hit by a ransomware attack. This incident marked a significant blow to the healthcare systems, impacting millions of Americans who rely on its services.\u00a0<\/p>\n Change Healthcare, a subsidiary of UnitedHealth Group (UHG), plays a pivotal role in the healthcare industry by processing billions of claims annually and facilitating the billing, payment, and revenue management for healthcare providers. This cyberattack forced UHG to disconnect numerous services and engage with law enforcement and cybersecurity firms to contain and remediate the threat.<\/p>\n The cyberattack occurred when the BlackCat\/AlphV ransomware group gained unauthorized access to Change Healthcare\u2019s network and encrypted vital data. Although some security researchers observed significant transactions directed to a Bitcoin account affiliated with BlackCat\/AlphV, the payment of the demanded $22 million ransom has not been confirmed by UHG, as of today.<\/p>\n While specific details have not been publicly disclosed, it is believed that the attackers exploited vulnerabilities in the network infrastructure. This emphasizes the importance of comprehensive assessments of network infrastructure security to identify and address vulnerabilities proactively.<\/p>\n [\/et_pb_text][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2025\/09\/AdobeStock_444613689-scaled.jpeg” title_text=”Vulnerable computer Systems being hacked and network ransomware digital cybercrime background concept. 3D illustration.” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_3_text_color=”#00688E” custom_css_free_form=”ol {|| list-style: none !important; || counter-reset: item; ||}||||ol li {|| counter-increment: item; || position: relative; || padding-left: 2em; \/* Adjust as needed for spacing *\/||}||||ol li::before {|| content: counter(item) %22.%22; || font-weight: bold; || position: absolute;|| left: 0; || width: 1.5em; || text-align: right;||}” global_colors_info=”{}”]<\/p>\n This cyber incident highlights the critical need for robust cybersecurity measures and comprehensive business continuity planning in the face of unexpected emergencies. Key lessons from the incident include:<\/p>\n By prioritizing user identity and access management, employee training, and business continuity planning, organizations can strengthen cybersecurity defenses against cyber threats while ensuring that they are well-prepared to respond to unexpected emergencies.<\/p>\n The NCSS encourages businesses to adopt comprehensive security practices and stay informed about evolving threats. We recommend you leverage a managed security service provider (MSSP) and also consider becoming an NCSS member to access a wide range of our services. We have partners who can help, here<\/span><\/a>. For more information, visit our Small Business page<\/span><\/a>.<\/p>\n <\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_divider _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”||-2px|||” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_2_font=”|600|||||||” header_2_text_color=”#00688E” global_colors_info=”{}”]<\/p>\n https:\/\/news.northeastern.edu\/2024\/02\/27\/healthcare-cyberattack-pharmacy-cause\/<\/a><\/p>\n https:\/\/www.techtarget.com\/whatis\/feature\/The-Change-Healthcare-attack-Explaining-how-it-happened<\/a><\/p>\n https:\/\/www.fiercehealthcare.com\/health-tech\/cybersecurity-patient-safety-what-ransomware-attack-change-healthcare-should-teach<\/a><\/p>\n https:\/\/www.hipaajournal.com\/change-healthcare-responding-to-cyberattack\/<\/a><\/p>\n https:\/\/www.usnews.com\/news\/health-news\/articles\/2024-03-04\/explainer-what-to-know-about-the-change-healthcare-cyberattack<\/a><\/p>\n https:\/\/healthitsecurity.com\/news\/change-healthcare-disconnects-system-amid-cyberattack<\/a><\/p>\n https:\/\/therecord.media\/change-healthcare-ransomware-attack-blackcat-alphv<\/a><\/p>\nHow It Happened<\/h3>\n
Lessons Learned<\/h3>\n
\n
Summary<\/h3>\n
References<\/h2>\n