Health insurance company UnitedHealth Group confirmed to the U.S. Senate Committee on Finance that it paid hackers USD22 million in ransomware payments, CNBC reports. UnitedHealth Group CEO Andrew Witty said hackers were able to access the system due to a lack of multifactor authentication tools, leading to a data breach that stole patients' personally identifiable information.