EPISODE · Aug 4, 2026 · 15 MIN
The Breach Files: Nine Days
from Dark Perimeter: True Cybersecurity Stories
On February 12, 2024, someone signed into a Citrix remote-access portal at Change Healthcare with a valid username and a valid password. Nine days later, the largest medical claims clearinghouse in the United States stopped, and with it the revenue cycle of hospitals, pharmacies, and physician practices across the country.Cole Drayden, Dr. Elliott Vance, and Marcus Hale open the Change Healthcare file: the nine-day dwell that most retellings erase, the MFA gap that UnitedHealth's own policy prohibited, the pre-acquisition backups that encrypted alongside production, and the $22 million ransom that bought nothing because the criminals defrauded each other.Also: why 192.7 million is the right number and "one in three Americans" was only the early estimate, why the Justice Department's 2022 antitrust case and the 2024 resilience failure turned out to be the same argument in different vocabulary, and what a security director with a budget and no leverage should actually do about it.Dark Perimeter: True Cybersecurity Stories.Support the show
Embed this episode
What this episode covers
On February 12, 2024, someone signed into a Citrix remote-access portal at Change Healthcare with a valid username and a valid password. Nine days later, the largest medical claims clearinghouse in the United States stopped, and with it the revenue cycle of hospitals, pharmacies, and physician practices across the country. Cole Drayden, Dr. Elliott Vance, and Marcus Hale open the Change Healthcare file: the nine-day dwell that most retellings erase, the MFA gap that UnitedHealth's own policy ...
NOW PLAYING
The Breach Files: Nine Days
No transcript for this episode yet
Similar Episodes
No similar episodes found.
Similar Podcasts
No similar podcasts found.