Change Healthcare cyberattack due to lack of multifactor authentication

The beginning of February’s Change Healthcare cyberattack happened when hackers entered a server that lacked multi-factor authentication. That’s according to UnitedHealth CEO Andrew Witty. He told U.S. senators during a hearing that his company was still trying to understand why the server did not have the additional protection that guards against hackers guessing passwords. Witty also says hackers gained access to Change Healthcare and unleashed a ransomware attack that encrypted and froze large parts of the company’s system.