Historical disclosure revision 1
Disclosures and evidence
Revision 1 of 2 · Evidence cutoff Feb 22, 2024, 12:00 AM UTC
0 prior statements preserved · 8 statements added. Attributed source statements retain the source’s qualifications.
What the company disclosed
UnitedHealth Group Incorporated stated: “On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems. Immediately upon detection of this outside threat, the Company proactively isolated the impacted systems from other connecting systems in the interest of protecting our partners and patients, to contain, assess and remediate the incident.”
Operational impact
UnitedHealth Group Incorporated stated: “During the disruption, certain networks and transactional services may not be accessible. The Company is providing updates on the incident at https://status.changehealthcare.com/incidents/hqpjz25fn3n7 . Please access that site for further information.”
Response
UnitedHealth Group Incorporated stated: “On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems. Immediately upon detection of this outside threat, the Company proactively isolated the impacted systems from other connecting systems in the interest of protecting our partners and patients, to contain, assess and remediate the incident.”
UnitedHealth Group Incorporated stated: “The Company is working diligently to restore those systems and resume normal operations as soon as possible, but cannot estimate the duration or extent of the disruption at this time. The Company has retained leading security experts, is working with law enforcement and notified customers, clients and certain government agencies. At this time, the Company believes the network interruption is specific to Change Healthcare systems, and all other systems across the Company are operational.”
Recovery updates
UnitedHealth Group Incorporated stated: “The Company is working diligently to restore those systems and resume normal operations as soon as possible, but cannot estimate the duration or extent of the disruption at this time. The Company has retained leading security experts, is working with law enforcement and notified customers, clients and certain government agencies. At this time, the Company believes the network interruption is specific to Change Healthcare systems, and all other systems across the Company are operational.”
Disclosure timeline
UnitedHealth Group Incorporated stated: “Date of report (Date of earliest event reported): February 21, 2024”
Qualifications and uncertainty
UnitedHealth Group Incorporated stated: “The Company is working diligently to restore those systems and resume normal operations as soon as possible, but cannot estimate the duration or extent of the disruption at this time. The Company has retained leading security experts, is working with law enforcement and notified customers, clients and certain government agencies. At this time, the Company believes the network interruption is specific to Change Healthcare systems, and all other systems across the Company are operational.”
UnitedHealth Group Incorporated stated: “As of the date of this report, the Company has not determined the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.”
Disclosure sources and provenance
- U.S. Securities and Exchange Commission Filed February 22, 2024Report/event date: February 21, 2024Document form: 8-K · Item 1.05SEC HTTPS source · Retrieved Oct 7, 2026, 2:31 PM UTC · Retained Oct 7, 2026, 2:31 PM UTC
Evidence limitations
- Issuer disclosures establish what was reported, not independent incident verification.