UnitedHealthcare knows about HIPPA but somehow this past year or so leaked (through one of their business partners iirc?) the Social Security Numbers PII of 100+ million Americans, an act which while perhaps inevitable can never be undone, also leaking the numbers of my three young kids which as a dad I now have to mildly worry about for the next few decades.
Nobody deserves to be murdered, there are way worse things where life itself is at stake as described in this article, and as someone working with databases and security over decades I know people in glass houses shouldnt throw stones.
But I am not a fan of these guys and I thought perhaps a few on this forum would appreciate this nerdly? petty? but also slightly serious vent and point.
related tidbits:
* UHC only acquired CHANGE 2-3 years ago hoping for AI gold. data is sometimes nuclear waste, eh?
* unconfirmed by me if CHANGE was UHC vendor prior to acquision but seems likely
* Biden DOJ blocked the
acquisition since it gave UHC access to competitor info managed by CHANGE, then later caved
* some CHANGE server didnt have MFA but was "supposed to" ... but theres probably more not disclosed
* it's widely (unusual for a hack) reported UHC did pay the hacker 22 million ransomware. maybe our kids numbers were saved but nobody actually saying that
* The hacker claiming responsibility for the hack was arrested in russia just now (see krebs blog). Within 72hrs of the assasination. No way thats a coincidence. Havent seen that angle reported yet though. Surely some strings being pulled or heat applied somewhere...
Nobody deserves to be murdered, there are way worse things where life itself is at stake as described in this article, and as someone working with databases and security over decades I know people in glass houses shouldnt throw stones.
But I am not a fan of these guys and I thought perhaps a few on this forum would appreciate this nerdly? petty? but also slightly serious vent and point.