ENTERFUSION INSIGHTS

The Change Healthcare Attack: Why One Login Matters

Businesses connected to a shared supplier, with an alternate route around a disruption.

Enterfusion Insights

The Change Healthcare Attack: Why One Login Matters

· Updated

Businesses connected to a shared supplier, with an alternate route around a disruption.
Original illustration for Enterfusion.

A stolen login can cause trouble far beyond one company.

What happened

In February 2024, criminals entered Change Healthcare through a remote-access system. UnitedHealth’s CEO later said that system lacked multi-factor authentication, or MFA. MFA adds another check when someone signs in. The attackers stole data and later locked systems with ransomware. The disruption affected health care claims and payments. Read the congressional testimony (PDF).

For business leaders, this raises two useful questions: How do people get into our systems? And what happens if a key supplier stops working?

Four checks for your business

  • Ask IT to confirm that remote access and important accounts require MFA.
  • Review old accounts and access left behind after a merger or staff change.
  • Test that backups can restore the systems your team needs.
  • Make a backup plan for payments, orders, and other work that depends on a supplier.

MFA reduces risk, but it is only one layer. Your business also needs ways to spot trouble and keep working during an outage.

Make your next step clear

Talk with Enterfusion about your security and recovery plans.

Contact Enterfusion
Back to all articles

Make your next step clear

Talk with Enterfusion about the technology decisions that matter to your organization.