Internet American | think big, build small | prev Enzyme, Optimizely, Medtronic
San Francisco, CA
Joined August 2008
- Tweets16.4K
- Following5.9K
- Followers2.6K
- Likes147K
Pinned Tweet
Part 3 of the $UHC - Change Health Ransomware Attack
✳️Recent developments include DOJ antitrust probe into UnitedHealth and HHS investigation into cyber attack
✳️ Impact extends to companies like McKesson and CVS, disrupting operations
✳️ Lack of clear communication from UnitedHealth prompts calls for regulatory updates and transparency
✳️ Consequences highlight fragility of healthcare system, particularly for community hospitals and providers facing financial strains
✳️ Regulatory interventions, including post-event analysis and mandatory security measures, deemed necessary to prevent future incidents
✳️ Multiple federal agencies involved in enforcement actions to address breach comprehensively
✳️ Recapped earlier episodes for audience members that missed parts 1 and 2:
ransomware attack on UnitedHealth, encrypting patient records and demanding ransom allegedly paid via Bitcoin; possibly retaliation against US government threats; disruptions in healthcare services since February 20th;
Part 2 on the UHG/Change ransomware attack.
Timeline of Events:
📅 February 19: ConnectWise discloses limited details of Screen Connect vulnerability.
📅 February 20: ConnectWise deploys hotfix, detection guidance released.
📅 February 21: First wave of ConnectWise related exploits reported in the wild, Sigma HA publishes detection rules.
📅 February 22: ConnectWise suspects non-patched versions are still vulnerable.
📅 March 03: ALPHV's bitcoin wallet drained of supposed $22M from United.
📅 March 04: "Notchy," ALPHV affiliate, airs grievances on RAMP. ALPHV makes a "good game" post. ALPHA announces sales of their ransomware suite for $5M. ALPHA site displayed with "seizure" announcement.
📅 March 05: Health tech leaders call for action to support small clinics, rather than just large hospital systems. HHS issues a statement offering support regarding the cyberattack on Change Healthcare, including the removal or relaxation of prior authorization requirements. HHS Statement Link
📅 March 06: RAMP forum mod awards "Notchy" win in grievance.
📅 March 07: United formally confirms their systems are being rebuilt, and that e-pharmacy and insurance claims processes are not yet resolved.
📅 March 8th: Optum employees report their IT systems are still being integrated, while UHG/Optum execs face criticism for shaming employees over bad IT hygiene.
📅 March 15: UnitedHealthcare and Change Healthcare announce that claim payments will be restored.
Discussion Points for Part 2:
✳️ Analysis of the ConnectWise vulnerability disclosure and response.
✳️ Impact assessment of the ConnectWise-related exploits in the wild.
✳️ Speculation on ALPHV's motives and tactics following the draining of their bitcoin wallet.
✳️ Insights into the grievances aired by "Notchy" and the response within the hacker community.
✳️ Examination of ALPHA's announcement regarding the sale of their ransomware suite and the implications for cybersecurity.
✳️ Updates on United's system rebuilding efforts and the ongoing disruptions to e-pharmacy and insurance claims processes.
✳️ Discussion on the challenges faced by Optum employees as they navigate IT system integration, coupled with the criticism faced by UHG/Optum executives for their approach to addressing IT hygiene issues among staff.
✳️ Analysis of the support offered by HHS in response to the cyberattack on Change Healthcare, including the removal or relaxation of prior authorization requirements.
Noting the rampant speculation on social media regarding terrorism and conspiracy theories about the motivations and true actors behind the cyberattack.
Highlighting the anticipated restoration of claim payments by UnitedHealthcare and Change Healthcare on March 15.
Additional Fact:
📊 Change Healthcare processes 15 billion transactions annually and supports 6,000 pharmacies, underscoring the significance of the cyberattack's impact on healthcare infrastructure.
peptide accounts tend to out themselves as sourcing the lowest quality and least validated supply.
as if paying $10 for something you inject into yourself is the ideal price, and a dollar more is grifting.
again, pay a fair price to a company your spouse can sue for $10M or more.
a most improbable turn of events
i’m either blessed or being punked for a third time in two decades.
EU is innovating by taxing revenue that doesn't exist
brilliant.
So, the French socialists, and Parliament members just voted a tax, that they don’t understand, which would cost VideoLAN more than 1 million euro per year.
They are probably the most clueless politician on Earth? And they claim they want technological sovereignty…
@LaurentLhardit
there is a need for a canonical CRM data model (npm: @foor/crmtypes)
small thing, but if you built connectors around it, anyone could slap it into their app and obviate the need to buy or build instantly.
Printing giant docs on laser printers is kind of fun because they get hot and start smoking, smelly
angry machines are amusing
onboarding funnels and id providers are going away; right? it might take a full decade.
which product is a great live example of this now?
successful direct-to-consumer, with no funnel at all?
public slack groups are useful, but at a high cost to attention
I bailed on them over a year ago
I’m still looking for something cooperative but calm
transactional, but within an envelope of decorum
There is no formal surveillance system for these compounds
Don’t anthropomorphize the sand anon
In collaboration with @olam_labs, we ran a series of experiments letting agent swarms compete in Minecraft and Mindustry.
We wanted to see what kinds of agent dynamics would emerge when they shared a world over long periods of time.
We found civil bureaucracy, thousands of telegraphic A2A messages, and OpenAI models retrieving the game's source code to beat Claude.
More on our findings below:
Ry ⭐ (h/acc) retweeted
Machines are tools, not persons. Today, some propose granting these systems rights, or even legal personhood. Such an approach risks obscuring human responsibility and leaving those who suffer harm to confront a faceless entity.
Cool government 👍
A felon suspected of a string of terrifying hot-prowl burglaries across San Francisco’s toniest neighborhoods had just been released from a short jail stint after threatening to shoot a man. sfpublicsafety.news/hot-prow…
2012 was crazy
like, do you mean I had to pretend I enjoyed Catan on every job interview or new friend hang?
medieval supply chain ass game
Bro’s first midterm
By all reports, something big is going down.
You got your finger on the pulse of the world, @grok, what do you think is happening?
there is an idea for a Boomer Chrome extension.
after they type something stupid, it renders the quote into a NYTimes headline.
and they have to choose to continue sending.
it would save corporations billions $
