FEDERALItem 1.05 · mandatoryMalwareHealthcareHealthcareCustomer Data InvolvedDownstream VictimsLowActive
CHANGE HEALTHCARE INC.
bd_8b5c150b15c7af22 · schema v1 · pii pii-v1
Full breach record for CHANGE HEALTHCARE INC. →UnitedHealth Group filed 8-K/A Amendment No. 2 updating prior disclosures about the Change Healthcare cyberattack. The amendment incorporates an April 22, 2024 press release describing ongoing data assessment, support for impacted individuals, provider/customer notifications, and Change Healthcare service restoration progress. The underlying incident is the previously disclosed cyberattack on UnitedHealth Group subsidiary Change Healthcare.
SEC clockMateriality determined Feb 21, 2024 → Filed Apr 24, 202463d ✗ SEC 4-day late9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/731766/000073176624000150/unh-20240221.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Apr 24, 2024
- Raw hash
- 328a51418994fe10eae46f0616b1c3cb22d01d5144511f5228df415e1296f9db
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- UnitedHealth Group Incorporatednorm: unitedhealth group
- SEC CIK
- 0000731766
- Domain
- unitedhealthgroup.com
- Industry
- Health Care
Victim entity
- Name
- CHANGE HEALTHCARE INC.norm: change healthcare
- Domain
- changehealthcare.com
- Industry
- Healthcare technology
- Industry
- Healthcarellm
Incident
- Discovered
- Feb 21, 2024
- Materiality determined
- Feb 21, 2024
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Ransomware
- Third party
- via Change Healthcaresubsidiary
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- SEC 4-day late · 63d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Feb 21, 2024→ Filed: Apr 24, 202463d cal. 4 business days SEC 4-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.