Cybercriminals exploited the absence of multi-factor authentication on a legacy server to infiltrate UnitedHealth subsidiary Change Healthcare, CEO Andrew Witty told a congressional committee. Up to a third of Americans had personal and health information stolen in the attack. Witty apologised and pledged to make UnitedHealth’s cyber defences “stronger than ever”. The insurance provider paid a $22m Bitcoin ransom and has since provided $6.5bn in accelerated payments to affected providers.

Bill would expand access to digital therapeutics
Sens. Capito and Shaheen reintroduced the Access to Prescription Digital Therapeutics Act of 2023, aiming to expand access to FDA-approved software treatments for Medicare patients.