FEDERALItem 1.05 · mandatoryHackingHealthcareHealthcareNation-stateNation State SuspectedTargetedLowActive
CHANGE HEALTHCARE INC.
bd_9365472735a4a678 · schema v1 · pii pii-v1
Full breach record for CHANGE HEALTHCARE INC. →On February 21, 2024, UnitedHealth Group identified a suspected nation-state cyber threat actor that had gained access to certain Change Healthcare IT systems. The Company isolated the impacted systems, retained security experts, engaged law enforcement, and notified customers and government agencies. As of the filing, UnitedHealth had not determined the incident reasonably likely to materially impact financial condition or results of operations.
SEC clockMateriality determined Feb 21, 2024 → Filed Feb 22, 20241d ✓ SEC 4-day OK≤1 day discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Feb 22, 2024
- Raw hash
- 96e8a0b48e5482edc27365c445e0a8417255d5c3c2a9a5f5a34e46822063f25a
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- UnitedHealth Group Incorporatednorm: unitedhealth group
- SEC CIK
- 0000731766
- Domain
- unitedhealthgroup.com
Victim entity
- Name
- CHANGE HEALTHCARE INC.norm: change healthcare
- Domain
- changehealthcare.com
- Industry
- Healthcarellm
Incident
- Discovered
- Feb 21, 2024
- Materiality determined
- Feb 21, 2024
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Unauthorized Access· nation-state
- Threat actor
- Nation-stateExternal
- Regulator citations
- Notified certain government agenciesWorking with law enforcement
Compliance
- Time to disclose
- ≤1 day(1 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 1d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Feb 21, 2024→ Filed: Feb 22, 20241d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.