Company: CI
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001739940-25-000009
Chunk: 1087

Company: Cigna Group
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1
Chunk 1087
---
 greater consumer engagement in health care require new and enhanced technologies, including applications for mobile devices. Connectivity among technologies is becoming increasingly important. We must also develop new systems to meet current market standards and keep pace with continuing changes in information processing technology, evolving industry and regulatory standards, and customer needs. Failure to do so may present compliance challenges and impede our ability to deliver services in a competitive manner. Further, because system development projects are long-term in nature, they may be more costly than expected to complete and may not deliver the expected benefits upon completion. Our failure to effectively invest in, implement improvements to and properly maintain the uninterrupted operation, availability and data integrity of our systems could adversely affect our results of operations, financial position, cash flow and internal controls over financial reporting.

23

As a large global health company, we and our vendors are subject to cyberattacks or other privacy or data security incidents. If we are unable to prevent or contain the effects of any such attacks, or fail to ensure vendors do the same, we may suffer exposure to substantial liability, reputational harm, loss of revenue or other damages.

Our business depends on our clients' and customers' willingness to entrust us with their health-related and other PII, including PHI, that is subject to privacy, security or data breach notification laws. Computer networks or systems may be vulnerable to intrusion, computer viruses or malware, programming errors, attacks by third parties or similar disruptive problems. We have been, and will likely continue to be, the target of computer viruses or other malicious codes, unauthorized access, cyberattacks or other computer-related penetrations. There have been, and will continue to be, large-scale cyberattacks within the health service industry. For example, Change Healthcare, a health technology company owned by UnitedHealth Group and a service provider for certain of our pharmacy benefit management services, was the victim of a ransomware attack in February 2024, which resulted in limited disruption of certain of our services and necessitated security validations for certain systems before we reconnected with Change Healthcare to resume such services. Additionally, hardware, software or applications we develop or procure from third parties may contain defects in design, manufacturer defects or other problems that could unexpectedly compromise information technology. Human or technological error has and could in the future result in, for example, unauthorized access to and acquisition, disclosure, modification, misuse, loss or destruction of company, customer, or other third-party data or systems; theft of sensitive, regulated or confidential data, including PII and intellectual property; the loss of access to