Skip to main content

Author: cosmoportals

Cosmo Portals Cybersecurity Newsletter

The News

UnitedHealth Ransomware Attack Exposes 190 Million Users Personal & Healthcare Data

In February 2024, UnitedHealth Group’s subsidiary, Change Healthcare, suffered a ransomware attack compromising the personal and healthcare data of approximately 190 million individuals (# affected individual recently announced). This breach, the largest in U.S. history, exposed sensitive information, including insurance details and medical records. The attack caused significant disruptions across the U.S. healthcare system, delaying claims processing and impacting patient care. In response, Change Healthcare reportedly paid ransoms to prevent further data leaks. The Office for Civil Rights (OCR) is investigating the breach to enforce compliance with the Health Insurance Portability and Accountability Act (HIPAA).

Cosmo Portals Services to Reduce Ransomware Risks

At CosmoPortals Technology Solutions, we offer comprehensive solutions to safeguard your organization against ransomware threats:

  • Continuous Penetration Testing: Our fully managed services product combines advanced attack surface management technology with expert-driven continuous penetration testing to identify and remediate exposures before attacker’s strike.
  • Cyber Hygiene Services: We provide scanning and testing services to assess, identify, and reduce your exposure to threats, including ransomware. By leveraging these services, organizations can find ways to mitigate attack vectors effectively.
  • Employee Training: Educating your staff on cybersecurity best practices to prevent phishing and other common attack methods.
  • Incident Response Planning: Developing and implementing a robust incident response plan to ensure quick action in the event of a security breach.

Lessons Learned

The implementation of these practices would aid in reducing both the likelihood and impact associated with ransomware attacks:

  • Regular Security Assessments: Continuous evaluation of your security posture can help identify vulnerabilities before they are exploited.
  • Data Encryption: Ensuring that sensitive data is encrypted can protect information even if a breach occurs.
  • Access Controls: Implementing strict access controls can prevent unauthorized access to sensitive information. Appropriate access controls could help prevent privilege escalations.
  • Backup Strategies: Regularly backing up data ensures that you can restore systems without paying a ransom in case of an attack. Also, backup data should be encrypted.

Schedule a Free Consultation

Protect your organization from potential vulnerabilities. Contact Cosmo Portals today to schedule a free consultation, where we can assess your network and address any security concerns. Email: contact@cosmoportals.com or call +1 (301) 329 3298

Together, we can build a resilient cybersecurity posture to safeguard your organization’s future.

How to reset MFA for a user in office 365

With the rise of cloud computing, Office 365 has become an integral part of many organizations’ IT ecosystems, providing seamless collaboration, productivity, and security features. However, one of the most frequent challenges administrators face is managing Multi-Factor Authentication (MFA) resets. Users often encounter issues such as lost authentication devices, expired MFA settings, or difficulties accessing their accounts after a security update. As a result, MFA requests make up a significant portion of IT support tickets, adding to the workload of helpdesk teams.

This guide provides a step-by-step approach to efficiently resetting MFA in Office 365, ensuring users can regain access while maintaining security best practices.

  1. Log into office 365 as admin
    https://www.office.com/
  2. Show all Admin Centers → Microsoft Entra
    https://entra.microsoft.com/
  3. Click Users → Pick right user → Click on “Authentication Methods”

Download

Add to Drive

Save a copy to Photos

4. Click “Require re-register multifactor authentication”