UnitedHealth CEO: 'Decision to pay ransom was mine'

theregister.com

16 points·rntn··8 comments

It's high time that CEO's be fined and/or forfeit their big paychecks for a breach. It's only then will they take these seriously.

The SOP seems to be, we get hacked, your data is compromised, we will provide you free credit report monitoring and now I am away on my private jet.

If the government cannot do anything to stop these monopolistic organizations at least they should pass stringent laws to prevent such a massive breach of members data.

This isn't without precedence -- look at SOX regulations that hold executives accountable for the accuracy of their books (and all the processes that spawned from that).

It makes sense that the bad decision wasn't made by someone that's IT savvy. It would be good for the nation if paying corporate blackmail and ransom was illegal.

Such a policy would improve investment in data security and aligns nicely with our other policy regarding hostage-taking: we don’t negotiate.

Just hoping the US government dedicates more resources to protecting companies from foreign data intrusions than they do hunting down people at or near the capital on January 6.

What do you think the Federal government should be doing to protect companies from foreign intrusions? (Assuming this was foreign.)

The U.S. Capitol Police has a pretty clear mandate regarding riots. I don’t want the Feds interfering with how my business interacts with the Internet.

Reclassify foreign software worms as a type of WMD. Then it would be easy to search and destroy the foreign black hat infrastructure.

Your confidence about the ease of this is amusing.

Reply on news.ycombinator.com