Change Healthcare ransomware attack began with credentials and no MFA

The Change Healthcare ransomware attack, one of the most disruptive in US healthcare, started with compromised credentials on a server lacking MFA.