
PLEASE--we need some reporting here
Dear El' Reg,
This incident is a primary example of why we need a free & robust press. My company has a dependence on Change Healthcare, and to date, we have not received or observed any of the following:
1) A statement that they believe that their systems are now clear of the intrusion.
2) A statement revealing about how their systems were compromised.
3) Any indication of the nature of the records that were exfiltrated.
Nevermind a post-mortem or RCA.
In fact, UHC has stopped updating the status page for the incident. It is redirecting to a page that someone without background information might entirely miss the fact that there was an actual compromise of data.
We DESPERATELY need the press (that would be you) to hold UHC's feet to the fire on this. Summarizing press releases is not reporting.