CHANGE HEALTHCARE INC.

UnitedHealth Group filed an Amendment No. 1 to its February 22, 2024 Form 8-K disclosing that cybercrime threat actors had gained access to certain Change Healthcare IT systems. The Company isolated the impacted systems, notified customers, law enforcement and government agencies, and is investigating the extent of impacted data. The Company believes the issue is specific to Change Healthcare; all other systems remain operational. As of the amendment date, no material impact on financial condition or results of operations had been determined.

Bioventus (reporting entity) disclosed in its 10-K Item 1C that Change Healthcare (victim/third-party vendor) experienced a cybersecurity incident where a threat actor gained access to its IT systems. Bioventus states the incident has not materially affected its financial condition, though patient billing and claims processing were disrupted. Bioventus identified an alternative intermediary and resumed some submissions. UnitedHealth Group (Change Healthcare's parent) was investigating as of March 7, 2024.

Option Care Health, Inc. filed an 8-K disclosing that Change Healthcare, a subsidiary of UnitedHealth Group, experienced a cybersecurity incident on February 21, 2024. Option Care Health disconnected from Change Healthcare's systems on that date and has not identified any compromise of its own systems. The incident caused operational disruptions, preventing the processing of over half of the Company's claims, impacting cash flow and patient care operations.