UnitedHealth CEO details cyberattack root, working 24/7 to ‘fix this’ [Video]

UnitedHealth Group CEO Andrew Witty revealed new details about the cyberattack on its Change Healthcare unit earlier this year, and said the company has been working around the clock to fully restore its systems following the widespread outages from the attack.

In prepared remarks before the Senate Finance Committee on Monday, Witty said the perpetrator of the Feb. 21 hack was a cybercriminal known as Blackcat or ALPHV, confirming earlier reports that the ransomware group had taken credit for the attack.

The CEO said cybersecurity experts are still investigating the hack, but have so far been able to determine that criminals used compromised credentials to access Change’s systems nine days prior to the deployment of the ransomware, through a remote-access portal that did not have multi-factor authentication.

KAISER PERMANENTE SAYS DATA BREACH MAY AFFECT 13.4M CUSTOMERS

Witty said it could be months before UnitedHealth knows the full scope of the data breach, and reconfirmed that the company “found files containing protected …