UnitedHealth information breach leaked data on over 100 million individuals

On February 12, criminals used compromised credentials to remotely entry a Change Healthcare Citrix portal, an software used to allow distant entry to desktops. The portal didn’t have multi-factor authentication. As soon as the risk actor gained entry, they moved laterally inside the techniques in additional refined methods and exfiltrated information. Ransomware was deployed 9 days later.