No multifactor authentication? They must be self insured for cyber because no carrier would have them without MFA.
this post was submitted on 26 Jan 2025
303 points (100.0% liked)
Privacy Guides
17286 readers
160 users here now
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
- We prefer posting about open-source software whenever possible.
- This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
- No soliciting engagement: Don't ask for upvotes, follows, etc.
- Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
- Be civil, no violence, hate speech. Assume people here are posting in good faith.
- Don't repost topics which have already been covered here.
- News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
- Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
- No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
- No misinformation: Extraordinary claims must be matched with evidence.
- Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
- General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Additional Resources:
- EFF: Surveillance Self-Defense
- Consumer Reports Security Planner
- Jonah Aragon (YouTube)
- r/Privacy
- Big Ass Data Broker Opt-Out List
founded 2 years ago
MODERATORS
Or wanna bet it was some exec's account who would have fired people for making his life inconvenient, but somehow now it's going to be rogue engineers?
If the US didn't have idiots for voters we would have a healthy balanced political system and these breaches would come with mandatory jail time for the execs.
Blaming voters for elites ruling us is kinda off IMHO
After owners killed JFK, we have been in boiled frog scenario.
You have the same information available to you as everyone else. Yet I'm guessing you have a different stance on the issue than the "idiots"? How is that? I'm assuming you aren't any richer than them, smarter, or connected.
So if you can come to a rational conclusion on matters what is the excuse of other people? There's likely not anything particular special about you that made you an exception from the masses.
Then let us proceed down the "Oh it's not in my control and therefore not my fault as a voter" trail because it's done us fuck all any good.
I'd prefer to review where there were options ignored though.
General Trend in Primaries: Over the past decade, nearly 80% of eligible voters consistently did not participate in primaries, highlighting a persistent problem with voter engagement in these crucial election. (https://bipartisanpolicy.org/press-release/voters-dont-participate-primaries/)
While a specific number isn't universally accepted as "healthy," the data suggests that aiming for turnout rates above 60-65% could be beneficial for both democratic engagement and public health outcomes. However, it's important to note that the quality of civic participation and the inclusivity of voting policies are also crucial factors in assessing the health of a democracy, not just the turnout percentage alone. (https://democracyindex.hdhp.us/)
2018 California Gov Primary: The turnout rate of 33.7% was the highest for a midterm primary election in California since 1998. The primary featured a large field of candidates, with 27 individuals appearing on the ballot across various parties. Despite a constellation of choice, voters still went with status quo. (https://www.courthousenews.com/california-2018-midterm-primary-turnout-highest-in-2-decades/) (https://en.wikipedia.org/wiki/2018_California_gubernatorial_election)
2022 Idaho Gubernatorial Election: The turnout was 57.18%, a slight decrease from the previous election. Despite having five candidates on the ballot, including an independent candidate who received significant support, incumbent Republican Brad Little won re-election with 59.83% of the vote. This shows voters sticking with the status quo even with notable alternatives. (https://en.wikipedia.org/wiki/2022_United_States_gubernatorial_elections)
2013 New York City Mayoral Election: 15 candidates appeared on the ballot across various parties. Turnout was relatively low, with only 1,087,710 total votes cast. Despite the large number of candidates, Bill de Blasio won decisively with 73.15% of the vote. The second-place candidate, Joe Lhota, received only 24.31% of the vote. Third-party and independent candidates collectively received less than 3% of the vote. Status quo upheld. (https://en.wikipedia.org/wiki/New_York_City_mayoral_elections)
2022 Los Angeles Mayoral Election: Primary election had 12 candidates on the ballot. Top two candidates advanced to the general election. Karen Bass won with 54.82% of the vote (506,372 votes) / Rick Caruso received 45.18% (417,375 votes). Despite a large field of candidates in the primary, voters ultimately chose between two well-known figures in the runoff. (https://en.wikipedia.org/wiki/2022_Los_Angeles_mayoral_election)
There’s a young computer wiz out there who could fix their problems 
I wonder if they are going to mail their customers a notice of this. I've seen nothing but a asshole sticking survey that barely let you criticize them. I tried my hardest.
I’ve never been a UMH customer, but about 7 months after the breach happened (November), I got a letter from the company handling customer complaints for Change Healthcare, telling me an unbeknown amount of my medical and or financial information was leaked to unknown parties via some unknown method. If I had questions, I could call the company handling customer complaints.
When I called to ask how Change came to be in possession of my medical data, that they then lost, and subsequently failed to inform me of the situation within my state’s statutory notification window for having your data hacked, the representative told me they didn’t know, and would not be able to find out what company had entrusted them with my data.
I just went back online, no secure messages. Nothing. I don't know if NY has any laws to help me but i will be calling today. I'm bored and i feel like being a major PITA to them. I have some good friends whose parents are retired lawyers and they love giving me questions to ask.
I got notified of it in the first quarter of last year.
I had already switched insurances because all my providers stopped accepting UHC because THEY WEREN'T PAYING THE FUCKING PROVIDERS
6-8 months before they even start processing claims. MetLife is the same.
Kaiser has best payout rates and I think they are a non profit.
I am not sure if they are actually better but if we going by this metric they are top.
There ain't no "You", in UnitedHealth
There ain't no "Me", in the company
There ain't no "Us" in the private trust
There's hardly humans in humanity
CEOs come and go and one just went
The ingredients you got bake the cake that you get
There is no profit in securing customer data and there is no drawback for the company when data breaches occur. Without regulation, there will never be motivation for companies to give a shit.
They will apologize like Old navy does every few years for sweatshops, claim they really care and promise to improve (they won’t).
What the apology really means?
“Enjoy your free year of credit monitoring and fuck off.”
On the contrary to drawbacks, it benefits some companies to leak data when partnerships between corporations are made based on data swaps. And the first person to snitch on this practice gets whacked, apparently.
It’s literally this. I worked software for a financial company and we were considered a cost center. It showed in how they cut corners.
"The hackers gained initial access using a stolen account credential that lacked multi-factor authentication security, according to UnitedHealth."
Absolutely unacceptable. I might be easier to forgive them if some zero day was used, but that's so easily preventable.
That account presumably had some level of privileges, the policy should have been to enforce MFA, and if the account was inactive, disable it until the user needs it at which point set up MFA again.
190 Million person class action.
In 8 years you'll get a visa gift card with 12 cents on it
Well they make, what, 80 Billion a year? So 80B/190M = $421 each? Plus we'd fuck them over? Hey, we got nothing better to do but get sick and die.
After lawyer fees, it'll be back down to 12 cents.
Depends on the lawyers, dunnit.
Fuck $421. Should be free healthcare, no copay no deductible no denials, for those affected. Really teach those bastards.
Agreed but every bit helps.
you need basic copays, otherwise patients have incentive to over use the service.
something like 20 bucks, would work. either way, if you need to see a professional, you should be able to see one. if he or she says, you need treatment, you get the treatment.
how did society permit a bunch of parasites unrelated to medical profession second guessing quacks? THE ONLY PEOPLE WHO CAN SECOND GUESS A DOCTOR IS ANOTHER FUCKING DOCTOR
That's why it is a learnt profession... do we have bean counters and MBAs second guessing every technical decision a lawyers or engineer makes? wtf
"overuse" shut up
People have jobs to work and social lives to live.
You are basically trading screwing poor and homeless people for mildly inconveniencing the one lonely old man in town.
Any direct cost to individuals worsens the health outcomes of people in poverty, and the disabled, and the elderly.
how to fuck do you overuse medical care?
by not using common sense.
currently all of that is happening at emergency room departments which is a reason among million others as to why emergency care is priced idiotically.
certain people will go over wildest shit that anyone with 3 brain cells could figured out that it does not require a professional.
So to prove your point about it needing to cost something, it requires us to look at the fact that it costs more and people are still doing it?
People who are doing are generally social security, medicaid, or judgement proof. normal people can't do this as this would ruin them financially.
I can think of a system that would fix it for both.
They will not be held accountable for this and then people wonder why pedons think Luigi did nothing wrong lol