---
schema_version: "secwatch.filing_event.v1"
accession: "0000731766-24-000150"
form_type: "8-K/A"
ticker: "UNH"
cik: "0000731766"
company_name: "UNITEDHEALTH GROUP INC"
filed_at: "2024-04-24T23:59:59+00:00"
generated_at: "2026-06-03T10:25:26.183169+00:00"
event_type: "cyber"
sentiment: "negative"
materiality_score: 0.85
calibrated_materiality_score: 0.85
confidence: "high"
source: SEC EDGAR
---

# UnitedHealth Group: Change Healthcare Cyberattack Data Review Ongoing, 80% of Functionality Restored

## Summary
- Data sampling found files containing PHI or PII that could cover a substantial proportion of people in America; no evidence of full medical histories exfiltrated.
- 22 screenshots allegedly from exfiltrated files containing PHI/PII posted on dark web for about a week; no further publication to date.
- Company offers free credit monitoring and identity theft protections for two years to impacted individuals via call center 1-866-262-5342.
- Pharmacy services at 99% of pre-incident levels; medical claims flowing near normal; payment processing at 86% of pre-incident levels.
- Approximately 80% of Change Healthcare functionality restored; full restoration expected in coming weeks.

## SEC filing metadata
- accession: 0000731766-24-000150
- form_type: 8-K/A
- ticker: UNH
- cik: 0000731766
- company_name: UNITEDHEALTH GROUP INC
- filed_at: 2024-04-24T23:59:59+00:00
- event_type: cyber
- sentiment: negative
- materiality_score: 0.85
- calibrated_materiality_score: 0.85
- confidence: high
- sec_items: 1.05, 9.01
- EDGAR index: https://www.sec.gov/Archives/edgar/data/731766/000073176624000150/0000731766-24-000150-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/731766/000073176624000150/unh-20240221.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0000731766-24-000150
- JSON: https://secwatch.observer/filing/0000731766-24-000150.json
- Plain text: https://secwatch.observer/filing/0000731766-24-000150.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.