Hello. Two Democratic senators are demanding information from UnitedHealth Group about the emergency relief loans it provided to healthcare providers after a cyberattack last year and how it’s collecting those debts.

Sens. Elizabeth Warren (D., Mass.) and Ron Wyden (D., Ore.) sent a letter on Wednesday to UHG Chief Executive Stephen Hemsley and Optum Financial Chief Executive Dhivya Suryadevara, expressing concern about the company’s payment demands to healthcare providers who took the loans. UHG says it lent more than $9 billion through its Temporary Funding Assistance Program after a February 2024 cyberattack.

Read our exclusive story here. 

Also today:

• TransUnion discloses data breach
• Fallout from Salesloft Drift hack grows
• Crackdown on North Korea's IT worker scheme

The Cybersecurity newsletter will be taking a break Monday for the Labor Day holiday in the U.S. We'll be back Tuesday.

Salesloft Drift Breach More Widespread and Severe. A data breach disclosed by the sales engagement platform Tuesday was a more expansive downstream attack than previously thought, potentially ensnaring far more users. Salesloft said it’s working with Mandiant, Google Cloud’s incident response division, and cyber insurer Coalition to investigate the attack, which enabled hackers to access customer Salesforce environments and exfiltrate sensitive data. (CyberScoop) 

Phishing Attacks Target Microsoft Teams. Security researchers have uncovered a wave of phishing attacks targeting Microsoft Teams to deliver malware. The attacks use fake IT support accounts to trick employees into installing remote access software that gave attackers direct control over corporate systems, researchers said. (InfoSecurity Magazine) 

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash, reporter James Rundle, reporter Angus Loten and reporter Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.