FEDERALSEC 10-K Item 1CFirst filing
Filed Feb 27, 2026bd_3b6a8fca8fa8e0f1
On October 24, 2025, VITAS Healthcare (a Chemed subsidiary) discovered that a compromised third-party vendor account attempted to deploy an attacker tool in its IT environment. Protected health information of current and former patients was viewed and exfiltrated. On October 29, a threat actor demanded payment to prevent data release; VITAS paid and obtained deletion assurances. Incident contained; cyber insurance covered costs above a $500,000 deductible.