FEDERALItem 1.05 · mandatoryHackingHealthcareHealthcareNation-stateNation State SuspectedTargetedLowActive

CHANGE HEALTHCARE INC.

bd_9365472735a4a678 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 21, 2024

Filed

Feb 22, 2024

To disclose

≤1 day

Affected

Not disclosed

Linked

14 filings

Confidence

76%

Full breach record for CHANGE HEALTHCARE INC. →7 incidents on file

On February 21, 2024, UnitedHealth Group identified a suspected nation-state cyber threat actor that had gained access to certain Change Healthcare IT systems. The Company isolated the impacted systems, retained security experts, engaged law enforcement, and notified customers and government agencies. As of the filing, UnitedHealth had not determined the incident reasonably likely to materially impact financial condition or results of operations.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Feb 21, 2024 → Filed Feb 22, 20241d ✓ SEC 4-day OK≤1 day discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · ≤1 day / 1 days

Feb 21, 2024

Discovered

Feb 22, 2024

Filed

vs. sector median

11 wks faster

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_475102911ae1328e2024-08-01 · +161dVerified
Montana State AGbd_20fef244fbf67f712024-08-02 · +162dVerified
New Hampshire State AGbd_546b3d03391ed1822024-08-02 · +162dVerified
California State AGbd_6999730badb3aebb2024-08-03 · +163dVerified

Show 6 more filings ↓up to 253d gap

Oregon State AGbd_788f5843714453cb2024-08-03 · +163dVerified
Massachusetts State AGbd_969ae8733a313abf2024-08-03 · +163dVerified
Washington State AGbd_dc48a09555e80a912024-08-03 · +163dVerified
South Carolina State AGbd_6c170b3ed5a97da52024-08-05 · +165dVerified
Oregon State AGbd_1091c4bb67ec440a2024-09-16 · +207dVerified
Illinois State AGbd_99990548386b282d2024-11-01 · +253dVerified

Showing first 10 of 13 linked disclosures.

Name: UNITEDHEALTH GROUP INCORPORATED
norm: unitedhealth group
SEC CIK: 0000731766
Domain: unitedhealthgroup.com

Name: CHANGE HEALTHCARE INC.
norm: change healthcare
Domain: changehealthcare.com
Industry: Healthcarellm

Discovered: Feb 21, 2024
Materiality determined: Feb 21, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unauthorized Access· nation-state
Threat actor: Nation-stateExternal
Regulator citations: Notified certain government agenciesWorking with law enforcement

During the incident: Proactively isolated the impacted systems from other connecting systems
Retained leading security experts
Working with law enforcement
Notified customers, clients and certain government agencies
Working diligently to restore those systems and resume normal operations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: SEC 4-day OK · 1d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Feb 21, 2024
→ Filed: Feb 22, 2024
1d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Feb 21, 2024 → Filed: Feb 22, 2024	1d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

SEC 8-KFeb 22 · first · this page

Illinois State AG+161d

Montana State AG+162d

New Hampshire State AG+162d

California State AG+163d

Oregon State AG+163d

Massachusetts State AG+163d

Washington State AG+163d

South Carolina State AG+165d

Oregon State AG+207d

Illinois State AG+253d

Pattern: first filing Feb 22, last Nov 1 (IL) — a 253-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 22, 2024
Raw hash: 96e8a0b48e5482edc27365c445e0a8417255d5c3c2a9a5f5a34e46822063f25a

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html28.1 KB

Download View at source

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityUNITEDHEALTH GROUP INCORPORATED

Victim entityCHANGE HEALTHCARE INC.

Incidentdiscovered Feb 21, 2024

Stated responseProactively isolated the impacted systems from other connecting systems

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing