News / Enforcement
Enforcement

Shareholder Lawsuit Claims UnitedHealth Misled Investors on Cybersecurity

Alexander Chua August 17, 2026
Black and white photo showing construction workers on an urban building site.

Photo by Tanish Mehta on Pexels

Shareholder Lawsuit Claims UnitedHealth Misled Investors on Cybersecurity

Two shareholder groups filed a lawsuit alleging that UnitedHealth misled investors, shuttered an internal Medicare billing audit, and ignored cybersecurity lapses that led to the historic Change Healthcare cyberattack.

Lawsuit Details

The complaint states that UnitedHealth misled investors. It further claims the company shuttered an internal Medicare billing audit. The suit also alleges ignored cybersecurity lapses according to Healthcare Dive.

Alleged Governance and Cybersecurity Issues

UnitedHealth ignored governance and cybersecurity gaps for years per the filing. These gaps are tied directly to the Change Healthcare incident in the complaint. The allegations center on actions that preceded the cyberattack.

Plaintiff Claims

Two shareholder groups brought the suit. The groups assert that UnitedHealth misled investors on multiple fronts. The claims include shuttering the Medicare billing audit and failing to address cybersecurity lapses according to Healthcare Dive.

Sources

See it in action

15-minute walkthrough tailored to your industry and workforce size.

35%
Pipeline reduction
95%+
Compliance rate
Zero
App downloads

No commitment. 15-minute call.