UNH

1. Top 5 Material Risks

• Medical Cost Estimation: The profitability of risk-based products—representing nearly 80% of consolidated revenues—depends on the ability to predict and price medical costs. Small variances in utilization rates or medical cost inflation can lead to significant changes in financial results, as cost increases typically cannot be recovered through higher premiums during a fixed contract period.
• Information Systems and Data Integrity: UnitedHealth Group depends on the integrity and availability of its data and information systems. Failure to maintain these systems, or the occurrence of cyberattacks, can lead to service failures, loss of customers, regulatory penalties, and increased operating expenses.
• Cybersecurity and Privacy: UnitedHealth Group is a frequent target of cyberattacks, including the 2024 Change Healthcare incident. Such events can result in the misappropriation of protected health information, operational shutdowns, and significant liability, with costs to remediate these threats often being material.
• Provider Relationships: The business relies on its ability to contract with physicians, hospitals, and other providers at competitive prices. Failure to maintain these relationships, or the emergence of competing Accountable Care Organizations (ACOs), can diminish bargaining power and increase medical costs.
• Market Competition: UnitedHealth Group faces significant competition in all markets. Failure to innovate, deliver value-based care models, or maintain market share—particularly if UnitedHealth Group loses accounts with more profitable products while retaining those with less profitable ones—could materially affect results of operations.

2. Company-Specific Risks

• Value-Based Care Integration: Optum Health’s fully accountable value-based arrangements require the successful integration of care delivery models; failure to provide higher-quality outcomes at lower costs could negatively impact financial positions.
• Acquisition Integration: UnitedHealth Group frequently engages in acquisitions, which present risks such as information technology vulnerabilities and different litigation risk profiles that may be more acute than those managed historically.
• Regulatory Capital Requirements: As a holding company, UnitedHealth Group depends on dividends from regulated subsidiaries. If these subsidiaries are required to maintain higher capital levels due to increased medical cost ratios, UnitedHealth Group’s ability to reinvest, service debt, or return capital to shareholders is constrained.
• Investment Portfolio Volatility: The substantial majority of UnitedHealth Group’s investments are in debt securities. Fluctuations in interest rates or defaults by issuers of corporate and municipal bonds could reduce investment income and require write-downs of investment values.

3. Regulatory/Legal Risks

• Government Program Funding: A significant portion of revenue is derived from Medicare Advantage, Medicare Part D, and Medicaid. Reductions in government funding, changes in allocation methodologies, or the termination of government contracts can materially affect results.
• Risk Adjustment Data Validation (RADV) Audits: CMS and the HHS Office of Inspector General perform RADV audits to validate coding practices. These audits have resulted in, and could continue to result in, retrospective payment adjustments, fines, and corrective action plans.
• Pharmacy Benefit Management (PBM) Regulation: Optum Rx is subject to federal and state laws governing relationships with pharmaceutical manufacturers and pharmacies. Investigations into PBM practices could lead to civil penalties, corporate integrity agreements, or fundamental changes to the PBM business model.
• ERISA Fiduciary Obligations: Pharmacy care services businesses provide services to ERISA-covered plans. If courts determine that fiduciary obligations apply to these services, UnitedHealth Group could face claims for breaches of fiduciary duty or prohibited transactions.

4. Financial Impact Map

• Medical Cost Estimation Errors → Medical Costs → Nearly 80% of consolidated revenues are derived from risk-based products where medical cost estimates involve extensive judgment.
• Cybersecurity Incidents → Operating Costs → Costs to eliminate threats and remediate incidents, such as the 2024 Change Healthcare cyberattack, are material and impact operating expenses.
• Medicare Advantage Funding Reductions → Premium Revenues → Funding pressures and benchmark reductions directly impact the revenue generated from Medicare Advantage programs.
• Goodwill Impairment → Goodwill → As of December 31, 2025, goodwill and other intangible assets totaled $131 billion, or 42% of total consolidated assets; impairment charges would directly reduce earnings.
• Investment Portfolio Defaults → Investment and Other Income → Defaults by issuers of corporate and municipal bonds would reduce investment income and require write-downs of investment values.