Pinned Tweet
Part 3 of the $UHC - Change Health Ransomware Attack
✳️Recent developments include DOJ antitrust probe into UnitedHealth and HHS investigation into cyber attack
✳️ Impact extends to companies like McKesson and CVS, disrupting operations
✳️ Lack of clear communication from UnitedHealth prompts calls for regulatory updates and transparency
✳️ Consequences highlight fragility of healthcare system, particularly for community hospitals and providers facing financial strains
✳️ Regulatory interventions, including post-event analysis and mandatory security measures, deemed necessary to prevent future incidents
✳️ Multiple federal agencies involved in enforcement actions to address breach comprehensively
✳️ Recapped earlier episodes for audience members that missed parts 1 and 2:
ransomware attack on UnitedHealth, encrypting patient records and demanding ransom allegedly paid via Bitcoin; possibly retaliation against US government threats; disruptions in healthcare services since February 20th;
Part 2 on the UHG/Change ransomware attack.
Timeline of Events:
📅 February 19: ConnectWise discloses limited details of Screen Connect vulnerability.
📅 February 20: ConnectWise deploys hotfix, detection guidance released.
📅 February 21: First wave of ConnectWise related exploits reported in the wild, Sigma HA publishes detection rules.
📅 February 22: ConnectWise suspects non-patched versions are still vulnerable.
📅 March 03: ALPHV's bitcoin wallet drained of supposed $22M from United.
📅 March 04: "Notchy," ALPHV affiliate, airs grievances on RAMP. ALPHV makes a "good game" post. ALPHA announces sales of their ransomware suite for $5M. ALPHA site displayed with "seizure" announcement.
📅 March 05: Health tech leaders call for action to support small clinics, rather than just large hospital systems. HHS issues a statement offering support regarding the cyberattack on Change Healthcare, including the removal or relaxation of prior authorization requirements. HHS Statement Link
📅 March 06: RAMP forum mod awards "Notchy" win in grievance.
📅 March 07: United formally confirms their systems are being rebuilt, and that e-pharmacy and insurance claims processes are not yet resolved.
📅 March 8th: Optum employees report their IT systems are still being integrated, while UHG/Optum execs face criticism for shaming employees over bad IT hygiene.
📅 March 15: UnitedHealthcare and Change Healthcare announce that claim payments will be restored.
Discussion Points for Part 2:
✳️ Analysis of the ConnectWise vulnerability disclosure and response.
✳️ Impact assessment of the ConnectWise-related exploits in the wild.
✳️ Speculation on ALPHV's motives and tactics following the draining of their bitcoin wallet.
✳️ Insights into the grievances aired by "Notchy" and the response within the hacker community.
✳️ Examination of ALPHA's announcement regarding the sale of their ransomware suite and the implications for cybersecurity.
✳️ Updates on United's system rebuilding efforts and the ongoing disruptions to e-pharmacy and insurance claims processes.
✳️ Discussion on the challenges faced by Optum employees as they navigate IT system integration, coupled with the criticism faced by UHG/Optum executives for their approach to addressing IT hygiene issues among staff.
✳️ Analysis of the support offered by HHS in response to the cyberattack on Change Healthcare, including the removal or relaxation of prior authorization requirements.
Noting the rampant speculation on social media regarding terrorism and conspiracy theories about the motivations and true actors behind the cyberattack.
Highlighting the anticipated restoration of claim payments by UnitedHealthcare and Change Healthcare on March 15.
Additional Fact:
📊 Change Healthcare processes 15 billion transactions annually and supports 6,000 pharmacies, underscoring the significance of the cyberattack's impact on healthcare infrastructure.
This app is free
Replying to @chamath
Pretty much.
As of the past few weeks, debt markets have almost entirely shut off access to money for any company that doesn’t have substantial revenue independent of AI data centers.
SpaceX closed $40B of debt for GPUs, but we’re investment grade and have Starlink & launch revenue.
That means the 200+ neoclouds are going to see guppy-level death and consolidation. Some will make it through, but not many.
my mildly contrarian take is that we are already in an age of abundance.
people are only happy when they perceive relative resources advantages
communists only when they have a scapegoat for their lack of agency.
pessimistic we can affect this tendency
patient advocacy groups demanded immediate access about 15 years ago.
it's now law.
Healthcare is the only industry that drops your cancer scan results into an app at 11 PM on a Friday, then closes for the weekend.
No call. No context. Just a PDF full of words like "suspicious" and "cannot be excluded" and a little banner that says "Sleep well!"
Meanwhile billing found me in 4 hours 😐
I did this meme and ChatGPT torched me
don't talk to ChatGPT about hedging strategies; absolutely no vision
my dad is the president of AI and he said this isn't true
Replying to @Suhail
I’ve heard several OAI people say there are unfixable bugs in hardware that are exploitable by AI models directly speaking machine code so even if we could solve software that’s not enough. We need defense to move faster than offense if that’s even possible we may just have a new normal that requires adapting to insecure software (bank transfers require going into a branch and taking a dna test 🤣😬)
Are you super mean?
I have a home page rewrite that you can say horrible things about.
Let me know and I will DM you.




















