Company: CI
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001739940-25-000009
Chunk: 10

Company: Cigna Group
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 10
---
 the means for obtaining access to our proprietary systems are becoming increasingly sophisticated. Cyberattacks can originate from a wide variety of sources, including terrorists, nation states, internal actors or third parties, such as external service providers, and the techniques used change frequently or are often not recognized until after they have been launched. For example, there continues to be an increase in new financial fraud schemes akin to ransomware attacks on large companies whereby a cybercriminal installs a type of malicious software, or malware, that prevents a user or enterprise from accessing computer files, systems or networks and demands payment of a ransom for their return. Those parties may also attempt to fraudulently induce employees, customers or other users of our systems to disclose or inadvertently provide access to systems in order to gain access to our data or that of our customers. In addition, while we have certain standards for all vendors that provide us services, our vendors, and in turn, their own service providers, may become subject to the same types of security breaches. Finally, our offices may be vulnerable to security incidents or security attacks, acts of vandalism or theft, misplaced or lost data, human error or similar events that could negatively affect our systems and our customers' and clients' data. 

The costs to eliminate or address security threats and vulnerabilities before or after a cyber-incident could be significant. Our remediation efforts may not be successful and could result in interruptions, delays, or cessation of service and loss of customers.

In addition, the unauthorized access to and the acquisition, use, disclosure or dissemination of information about us, our customers or other third parties could expose our customers and their private information to the risk of financial or medical identity theft. Unauthorized access to and the acquisition, use, disclosure or dissemination of information about our business and strategy could also negatively affect the achievement of our strategic initiatives. Such events could cause us to breach our contractual obligations and violate applicable laws. These events would negatively affect our ability to compete, our reputation, our customer base and our revenues and expose us to mandatory disclosure requirements, government investigations, litigation, and other enforcement proceedings, material fines, penalties, or remediation costs and compensatory, special, punitive and statutory damages, consent orders, and other adverse actions, any of which could adversely affect our business, results of operations, financial condition or liquidity.

Our use of artificial intelligence and machine learning present regulatory and legal challenges that could negatively affect our business and our reputation.

Our use of AI, including ML technologies, as well as more recent technological advances in AI/ML, poses risks