UnitedHealth did not have cyber-insurance coverage at the time of the ransomware attack on its Change Healthcare subsidiary, leaving it to cover the $22m ransom paid to hackers. The attack disrupted the US’s largest healthcare payment system, causing a backlog of healthcare claims and payments. Change Healthcare’s technology infrastructure has been rebuilt, increasing server capacity and cloud reliance. As a result, UnitedHealth now spends approximately $300m per year on cybersecurity, and has also provided over $6.5bn in no-interest, no-fee loans to thousands of providers in response to the attack.

Security Leaders Discuss Restaurant Brands International’s Vulnerabilities
According to research from two ethical hackers, Restaurant Brands International (RBI) has security flaws that could enable a malicious actor to remotely eavesdrop on orders