{"schema_version":"secwatch.filing_event.v1","accession":"0000731766-24-000150","form_type":"8-K/A","ticker":"UNH","cik":"0000731766","company_name":"UNITEDHEALTH GROUP INC","filed_at":"2024-04-24T23:59:59+00:00","discovered_at":"2026-05-14T18:03:21.865318+00:00","generated_at":"2026-06-03T10:25:26.183169+00:00","sec_items":["1.05","9.01"],"event_type":"cyber","sentiment":"negative","materiality_score":0.85,"calibrated_materiality_score":0.85,"confidence":"high","headline":"UnitedHealth Group: Change Healthcare Cyberattack Data Review Ongoing, 80% of Functionality Restored","bullets":["Data sampling found files containing PHI or PII that could cover a substantial proportion of people in America; no evidence of full medical histories exfiltrated.","22 screenshots allegedly from exfiltrated files containing PHI/PII posted on dark web for about a week; no further publication to date.","Company offers free credit monitoring and identity theft protections for two years to impacted individuals via call center 1-866-262-5342.","Pharmacy services at 99% of pre-incident levels; medical claims flowing near normal; payment processing at 86% of pre-incident levels.","Approximately 80% of Change Healthcare functionality restored; full restoration expected in coming weeks."],"urls":{"canonical":"https://secwatch.observer/filing/0000731766-24-000150","json":"https://secwatch.observer/filing/0000731766-24-000150.json","markdown":"https://secwatch.observer/filing/0000731766-24-000150.md","text":"https://secwatch.observer/filing/0000731766-24-000150.txt","edgar_index":"https://www.sec.gov/Archives/edgar/data/731766/000073176624000150/0000731766-24-000150-index.htm","edgar_primary_document":"https://www.sec.gov/Archives/edgar/data/731766/000073176624000150/unh-20240221.htm"},"model":{"generated_by":"deepseek-v4-flash:cloud@v2","generated_at":"2026-06-03T10:25:26.183169+00:00"},"review":{"review_status":"machine_generated","human_reviewed":false,"corrected":false,"correction_note":null,"correction_timestamp":null,"superseded_by":null,"related_filings":[]},"source_grounded_claims":[],"license":"Source filings: public domain (SEC EDGAR). Summaries (headline + bullets): CC-BY-4.0; attribute https://secwatch.observer"}