United Healthcare reported a data breach late last week. https://www.cbsnews.com/losangeles/news/united-healthcare-reports-data-breach-that-may-have-revealed-customers-personal-information/ Apparently a hacker used credential stuffing to break into some member portals in February. United just figured this out recently, and responded by forcing password resets and giving affected members two years of identity theft protection services.

This leaves a lot of questions, like:
1. What is credential stuffing?
2. Why did it take so long to discover?
3. Should members be concerned? What about those who’ve had an abortion or gender affirming care?
4. Did United fix the problem?

As of March 2025 HealthBiz is part of CareTalk. Healthcare. Unfiltered and can be found at the following links:

• Spotify https://open.spotify.com/show/2GTYhbNnvDHriDp7Xo9s6Z
• Apple https://podcasts.apple.com/us/podcast/caretalk-healthcare-unfiltered/id1532402352
• YouTube https://www.youtube.com/@CareTalkPodcast
• CareTalk website https://www.caretalkpodcast.com/

Host David E. Williams is president of healthcare strategy consulting firm Health Business Group.

Episodes through March 2025 were produced by Dafna Williams.