Deck 1 Flashcards
(12 cards)
1
Q
When did the breach begin?
A
February 12
2
Q
What was the initial attack vector?
A
Compromised credentials via Citrix without MFA
3
Q
How much data was exfiltrated?
A
6TB
4
Q
How much ransom was paid?
A
$22M (350 BTC)
5
Q
What was the total estimated cost of the breach?
A
$1 billion
6
Q
How many patients were impacted?
A
100 million
7
Q
How many healthcare providers were impacted?
A
1.6 million
8
Q
What percentage of U.S. health claims were affected?
A
~40%
9
Q
When was the ransomware detected and contained?
A
Feb 21
10
Q
What key vulnerability was exploited in the breach?
A
CVE 2024-1709
11
Q
What is UHG’s current NIST CSF Score?
A
2.1
12
Q
What is UHG’s target NIST CSF Score by FY2026?
A
2.5
