Change Healthcare, compromised by stolen credentials, did not have MFA turned on

AlphV deployed ransomware nine days after it used access to a Citrix portal on Change’s network to move laterally within systems, CEO Andrew Witty said in testimony prepared for a House subcommittee hearing set for Wednesday.

access alphv ceo change change healthcare citrix compromised credentials healthcare hearing house mfa network portal ransomware stolen stolen credentials systems testimony