Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsThe most likely match for “UnitedHealth Congressional Testimony Reveals Fails” is the May 1, 2024 Senate hearing on the Change Healthcare cyberattack. There, CEO Andrew Witty faced questions about cybersecurity and the disruption to healthcare operations. A separate January 2026 House hearing examined insurance affordability, coverage decisions and AI; it was not a follow-up hearing about the cyberattack. Neither set of testimony, by itself, is an independent investigation or a formal finding of liability.
Which UnitedHealth testimony does the title refer to?
The clearest fit is the Senate Finance Committee’s May 1, 2024 hearing, “Hacking America’s Health Care: Assessing the Change Healthcare Cyber Attack and What’s Next.” Andrew Witty, then UnitedHealth Group’s CEO, testified. The official GovInfo catalog identifies the hearing as Senate Hearing 118-785. A House Energy and Commerce subcommittee also held a hearing about the attack that day, “Examining the Change Healthcare Cyberattack,” with Witty as a witness.
The word “fails” is a judgment, not a formal conclusion in these hearing records. The 2024 record documents lawmakers’ scrutiny and the company CEO’s testimony; Wyden’s prepared remarks document his criticisms. Those materials do not, on their own, establish every allegation as fact or substitute for an independent technical audit or court finding.
| Hearing | Witness | Main subject | What the record can establish |
|---|---|---|---|
| Senate Finance, May 1, 2024 | Andrew Witty, UnitedHealth Group CEO | Change Healthcare cyberattack, cybersecurity and recovery | Official testimony and congressional questioning; Wyden’s prepared criticism is attributable to him, not an independent finding. |
| House Energy and Commerce, May 1, 2024 | Sir Andrew Witty | Change Healthcare cyberattack | The committee repository lists Witty’s statement, a summary, questions for the record and a transmittal letter; the hearing record was last updated June 21, 2024. |
| House Energy and Commerce, January 22, 2026 | Stephen Hemsley, UnitedHealth Group CEO, with other insurer executives | Health insurance affordability, prior authorization, denials and AI | A distinct hearing transcript records lawmakers’ questions and Hemsley’s answers, but does not independently audit the company’s systems or decide an individual coverage dispute. |
What did lawmakers criticize about the 2024 cyberattack?
Wyden’s criticism of the security controls
In his prepared statement for the May 1, 2024 Senate hearing, Finance Committee Chair Ron Wyden said a server providing access to protected health information lacked multifactor authentication (MFA). He argued that the attack exposed weaknesses in safeguards and recovery readiness, and described weeks of disruption to payment and other healthcare operations. These are Wyden’s statements as prepared for delivery—not findings from an independent technical investigation.
Wyden framed the scale of UnitedHealth and Change Healthcare as part of the public risk. His statement cited UnitedHealth’s $324 billion in revenue in the prior year and said its businesses touched 152 million individuals. It also cited Change Healthcare as handling roughly 15 billion healthcare transactions annually and said a third of Americans’ patient records passed through the company. Those figures are figures Wyden cited in 2024; the hearing statement does not independently verify them.
Wyden put his criticism plainly: “Accountability for Change Healthcare’s failure starts at the top.” He also asked Witty to explain “how a company of UHG’s size and importance failed to have multi-factor authentication on a server providing open door access to protected health information,” why recovery plans were inadequate, and how long it would take to secure all systems. The force of the language reflects the senator’s position; it does not turn the statement into an adjudicated finding.
Rank #2
What the hearing did not settle
The available hearing materials do not establish a definitive count of people whose information was exposed, independently verify every claimed impact, or resolve the full sequence of how the intrusion spread. A statement about a vulnerable server is not, by itself, a complete technical account of the breach. Nor does a hearing transcript alone prove the adequacy or inadequacy of every remedial measure.
Did UnitedHealth answer Congress’s questions about the attack?
Wyden’s later actions show that, in his view, important questions remained. On October 18, 2024, he said answers following Witty’s June testimony had not satisfactorily addressed his questions. He requested additional details about the intrusion and remediation, including independent cybersecurity audit reports for the five years before the attack, whether the initially compromised server had been audited, how hackers gained wider access, and what steps were being taken to prevent recurrence.
Recommended Free Tools
Rank #3
That was an oversight request and Wyden’s assessment of the answers—not proof that the requested audits were withheld, that no remediation occurred, or that the company failed to respond in every respect. The House committee repository provides another primary-record trail: it lists Witty’s witness statement and later questions for the record, among other hearing materials.
What did UnitedHealth’s CEO say about AI and claim denials in 2026?
The January 22, 2026 House Energy and Commerce hearing concerned health insurance affordability and included several insurer leaders. Its subject differed from the 2024 cyberattack hearings. In the transcript, Rep. Robin Kelly asked Hemsley whether UnitedHealth used AI or algorithmic tools to adjudicate claims or pretreatment estimates, and what governance or independent auditing guarded against inappropriate denials.
Hemsley answered: “We use AI solely for administrative purposes. We do not use it for clinical applications at all.” When Kelly asked whether that meant AI had nothing to do with denials, he described administrative uses such as gathering documents. Those answers are testimony about the company’s stated use of AI, not an independent audit of its systems or a complete account of how claims decisions are made.
In a separate exchange, Rep. Buddy Carter raised a constituent’s alleged medication denials and asked Hemsley about the case. Hemsley replied, “I don’t know that particular circumstances.” The transcript records the exchange; it does not determine whether the constituent’s coverage dispute was handled correctly.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallBest Value
How should readers interpret UnitedHealth’s 2026 affordability claims?
UnitedHealth’s own January 2026 hearing summary set out the company’s position on costs and proposed policy changes. It claimed nearly $300 billion in discounts negotiated in the prior year and said it would voluntarily eliminate and rebate profits for individual Affordable Care Act coverage that year. These are company-reported claims and commitments, not independent findings about the effect on what consumers pay.
The same company summary attributed several broader cost figures to its presentation: hospital prices rising nearly three times faster than inflation over 25 years, hospital care accounting for more than 30% of U.S. healthcare spending, and prescription drug spending increasing 269% since 2000 and about 9% annually during the preceding decade. Without the underlying data in the summary itself, these figures should be understood as figures presented by UnitedHealth, not independently validated conclusions.
Quick Recap
What the testimony establishes—and what it leaves open
- Established in the record: Congress held separate hearings on the 2024 Change Healthcare cyberattack and, in 2026, insurance affordability; the named executives testified, and lawmakers raised specific questions.
- Attributed criticism: Wyden said a server lacked MFA and questioned the company’s recovery readiness. His statement and later requests document his concerns, not an independent determination of fault.
- Attributed company position: Hemsley described UnitedHealth’s AI use as administrative rather than clinical, while the company’s 2026 summary made claims about discounts, costs and ACA coverage profits.
- Not resolved by testimony alone: The full technical cause and spread of the 2024 intrusion, a definitive exposed-record count, and the independent accuracy of company or lawmaker claims about particular impacts.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
