UHG filed an incident update stating they found PHI/PII in initial targeted data sampling "which could cover a substantial proportion of people in America."
➡️ They note this is not an official breach notification.
➡️ It will likely take several months to complete the analysis and notify impacted persons.
➡️ They have setup a support website and call center for people concerned about their personal data potentially being impacted to offer free credit monitoring and identity theft protections for two years. They have also staffed trained clinicians to provide support services.
➡️ They have offered to make notifications and undertake related administrative requirements on behalf of any provider or customer.
➡️ And update on service restoration was also provided.
#sec #cyberattack #8k #uhg
https://www.board-cybersecurity.com/incidents/tracker/20240222-unitedhealth-group-inc-cybersecurity-incident/