Investigation into the incident revealed that infiltration of Change Healthcare's employee systems through stolen credentials without multi-factor authentication enabled the eventual compromise of the firm's network with ransomware.
Article Link: More than 100M impacted by record-breaking Change Healthcare hack | SC Media