UnitedHealth reports cyber breach at Change Healthcare by suspected nation-state actor

UNITEDHEALTH GROUP INC

Suspected nation-state threat actor gained access to Change Healthcare IT systems on Feb 21, 2024.
Company isolated impacted systems; working with law enforcement and leading security experts.
Network interruption specific to Change Healthcare; all other company systems operational.
Cannot estimate duration or extent of disruption; updates at status.changehealthcare.com.
As of filing, company has not determined incident is reasonably likely to materially impact financials.

Key facts

Extracted from this filing and checked against the source text.

Cybersecurity Incidents SEC 8-K Item 1.05 confidence 0.9

UNITEDHEALTH GROUP INC disclosed a cybersecurity incident: a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems. Impact: the Company proactively isolated the impacted systems from other connecting systems; working to restore systems but cannot estimate the duration or extent of the disruption; certain networks and transactional services may not be accessible. Company determined it not material. Discovered 2024-02-21.

Nature: a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems
Impact: the Company proactively isolated the impacted systems from other connecting systems; working to restore systems but cannot estimate the duration or extent of the disruption; certain networks and transactional services may not be accessible
Materiality: not material
Discovery: 2024-02-21

Exact text from the filing

As of the date of this report, the Company has not determined the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.

View on SEC.gov

2 cybersecurity incidents filed in the last 30 days. Browse all cybersecurity incidents →

UNITEDHEALTH GROUP INC filing history →

Source: SEC EDGAR

accession 0000731766-24-000045

view filing index on sec.gov

view primary document

Machine-readable: JSON · Markdown · Plain text

This headline and bullets were generated automatically by deepseek-v4-flash:cloud@v2 from the public filing. Read the source on SEC.gov before relying on any specific claim. Not investment advice. See methodology for how this pipeline works.