What the changes say
- Competition risk now highlights telehealth, AI, new entrants, direct employer-provider contracting, drug pricing and distribution changes.
- Cybersecurity and third-party technology risks remain prominent, including ransomware, AI-enhanced attacks and vendor HIPAA compliance.
- Regulatory exposure spans fraud, waste and abuse, privacy, government programs, pharmacy networks and international operations.
What changed since the prior 10-K
New
- NewRisks Related to Our Business as a Health Company
We operate in a highly competitive and evolving business environment, and our failure to compete effectively or differentiate our products and services from those of our competitors could materially adversely affect our results of operations, financial position and cash flows
Competition may intensify through consolidation, new entrants, direct employer-provider contracting, telehealth, AI, drug pricing changes and shifting distribution channels.
- NewRisks Related to Our Business as a Health Company
standards and contractual requirements also apply to our vendors and require us to obtain written assurances of their compliance with such requirements
Vendors’ HIPAA compliance failures could expose Cigna to enforcement, financial harm and reputational damage; Cigna responded to an HHS OCR audit in 2025.
- NewRisks Related to Our Business as a Health Company
In addition, disclosure of an adverse investigation or audit or the imposition of fines or other sanctions could negatively affect our reputation in certain markets and make it more difficult for us to sell our products and services
Adverse investigations, audits, fines or sanctions could damage Cigna’s reputation and make products and services harder to sell.
- NewRisks Related to Our Business as a Health Company
Extensive health care regulation and enforcement, including fraud, waste and abuse laws, could increase our compliance costs, restrict our operations and expose us to significant liability
Expanding fraud, waste and abuse enforcement and complex healthcare rules could raise compliance costs, restrict operations and create liability.
- NewOperational Risks
and attract clients and customers, establish reserves, report financial results accurately and in a timely manner, and maintain regulatory compliance, among other things
IT outages, cyberattacks or third-party system failures could disrupt claims, customer service and other business functions despite continuity plans.
- NewOperational Risks
provide employee awareness training around phishing, malware and other cyber risks; however, such measures may not be effective against all types of security incidents
Sophisticated cyberattacks, ransomware-like financial fraud and AI-enhanced phishing could compromise Cigna or customer data despite employee training.
- NewOperational Risks
We face political, legal, operational, regulatory, economic and other risks in connection with our international operations
International growth exposes Cigna to geopolitical, legal, regulatory, labor, currency, corruption, privacy and data-residency risks.
Dropped
- DroppedStrategic and Operational Risks
We operate in a highly competitive, evolving and rapidly changing industry, and our failure to adapt could negatively impact our business
- DroppedStrategic and Operational Risks
Our failure to anticipate or appropriately adapt to changes in the industry could negatively impact our competitive position and adversely affect our business and results of operations
Industry shifts could alter healthcare-service dynamics and weaken Cigna’s ability to attract or retain clients and customers.
- DroppedStrategic and Operational Risks
The costs to eliminate or address security threats and vulnerabilities before or after a cyber-incident could be significant. Our remediation efforts may not be successful and could result in interruptions, delays, or cessation of service and loss of customers
Failure to compete, differentiate products or maintain enrollment could reduce Cigna’s market share and financial results.
- DroppedStrategic and Operational Risks
As a global company, we face political, legal, operational, regulatory, economic and other risks that present challenges and could negatively affect our multinational operations or our long-term growth
- DroppedStrategic and Operational Risks
These factors may increase in significance as we continue to expand globally, and operating in new foreign markets may require considerable management time before operations generate any significant revenues and earnings. Any one of these challenges could negatively affect our operations or long-term growth
- DroppedStrategic and Operational Risks
Further, we may finance strategic transactions by issuing common stock for some or all of the purchase price that could dilute the ownership interests of our shareholders or by incurring additional debt that could increase costs and impact our ability to access capital in the future
- DroppedLegal and Compliance Risks
each other. Noncompliance with applicable regulations by us or our third-party vendors could have material adverse effects on our business, results of operations, financial condition, liquidity and reputation
- DroppedLegal and Compliance Risks
and they vary across jurisdictions. In addition, more jurisdictions are regulating the transfer of data across borders, and domestic privacy and data protection laws are generally becoming more onerous
- DroppedLegal and Compliance Risks
Effective prevention, detection and control systems are critical to maintain regulatory compliance and prevent fraud; failure of these systems could adversely affect us
Reworded
- 95% rewrittenRisks Related to Our Business as a Health Company
Our business is subject to substantial government regulation, and new laws or regulations or changes in existing laws or regulations could have a material adverse effect on our business, results of operations, financial condition and liquidity
The risk now expressly includes vendor noncompliance, reputational damage and the need to respond to legislative, regulatory and enforcement developments.
Was: Our business is subject to substantial government regulation, as well as new laws or regulations or changes in existing laws or regulations that could have a material adverse effect on our business, results of operations, financial condition and liquidity
- 91% rewrittenRisks Related to Our Business as a Health Company
If we fail to comply with applicable privacy, security and data laws, regulations and standards, our business and reputation could be materially adversely affected
The scope now covers financial, payment-card, employee and other sensitive information, plus industry standards and client contracts, beyond PII and PHI.
- 90% rewrittenOperational Risks
Our business depends on our ability to effectively invest in, improve and properly maintain the uninterrupted operation, availability and data integrity of our information technology and other business systems
The wording retains data-integrity and system-disruption risks but continues into the impact on pricing, customers, reserves, reporting and compliance.
Was: Our business depends on our ability to effectively invest in, implement improvements to and properly maintain the uninterrupted operation, availability and data integrity of our information technology and other business systems
- 75% rewrittenOperational Risks
Strategic transactions involve risks, and we may not realize the expected benefits because of integration or separation difficulties, underperformance relative to our expectations, and other challenges, which could lead to an impairment charge
The risk now lists integration, separation, underperformance, impairment, litigation, contingent liabilities and buyer indemnification, replacing the HCSC example.
- 72% rewrittenRisks Related to Our Business as a Health Company
If significant changes occur within the pharmacy provider marketplace, or if other issues arise with respect to our pharmacy networks, including the loss of or adverse change in our relationship with one or more key pharmacy providers, our business and results of operations could be adversely affected
The pharmacy-network count fell from over 67,000 to over 65,000, while the ten largest chains’ concentration declined from about 60% to 47%; competitive relationship risk was added.
Was: If significant changes occur within the pharmacy provider marketplace, or if other issues arise with respect to our pharmacy networks, including the loss of or adverse change in our relationship with one or more key pharmacy providers, our business and financial results could be adversely affected
- 63% rewrittenRisks Related to Our Business as a Health Company
We must predict, price for and manage health care costs appropriately. We face price competition and other pressures that could compress our margins or result in premiums that are insufficient to cover the cost of services delivered to our customers
The risk now emphasizes small prediction-versus-actual medical-cost or utilization differences materially changing results, plus medical management, product design, provider contracting and underwriting.
Was: We face price competition and other pressures that could compress our margins or result in premiums that are insufficient to cover the cost of services delivered to our customers
- 61% rewrittenRisks Related to Our Business as a Health Company
There are various risks associated with participating in government-sponsored programs and providing services to payors who participate in government-sponsored programs, including dependence upon government funding, compliance with government contracts, and increased regulatory oversight and enforcement
The description changes the ordering of Cigna’s government-business relationships and adds funding risks from economic conditions, cost containment, budgets and political priorities.
- 60% rewrittenOperational Risks
A significant disruption in service within our operations or among our key suppliers or other third parties could materially adversely affect our business, liquidity and results of operations
The description mainly restructures the same operational-disruption risk, specifying claims, support centers, data centers, prescription handling and home delivery.
Was: A significant disruption in service within our operations or among our key suppliers or other third parties could materially adversely affect our business and results of operations
- 56% rewrittenRisks Related to Our Business as a Health Company
We face risks related to litigation, regulatory audits and investigations
- 54% rewrittenOperational Risks
Future performance of our business will depend on our ability to execute our strategic and operational initiatives effectively
- 54% rewrittenOperational Risks
Our use of artificial intelligence and machine learning present regulatory and legal challenges that could negatively affect our business and our reputation
- 39% rewrittenRisks Related to Our Business as a Health Company
If we fail to develop and maintain satisfactory relationships with health care payors, physicians, hospitals and other health service providers and with, producers and consultants, our business and results of operations may be adversely affected
- 31% rewrittenRisks Related to Our Business as a Health Company
In managing medical practices and operating pharmacies, onsite clinics and other types of medical facilities, we may be subject to additional liability that could result in significant time and expense
- 29% rewrittenFinancial Risks
The occurrence of these events have led, and may lead, to a decrease in our customer base, revenues or margins or an increase in our operating costs
- 23% rewrittenOperational Risks
We are dependent on the success of our relationships with third parties for various services and functions
- 21% rewrittenRisks Related to Our Business as a Health Company
Changes in drug pricing or industry pricing benchmarks could materially impact our financial performance
All 29 risk factors
Headings as the filing states them, in filing order.
Risks Related to Our Business as a Health Company
- 01We must predict, price for and manage health care costs appropriately. We face price competition and other pressures that could compress our margins or result in premiums that are insufficient to cover the cost of services delivered to our customers63% rewritten
- 02We operate in a highly competitive and evolving business environment, and our failure to compete effectively or differentiate our products and services from those of our competitors could materially adversely affect our results of operations, financial position and cash flowsNew
- 03Changes in drug pricing or industry pricing benchmarks could materially impact our financial performance21% rewritten
- 04If we lose our relationship with one or more key pharmaceutical manufacturers, or if the payments made or discounts provided by pharmaceutical manufacturers decline, our business and results of operations could be adversely affected
- 05If significant changes occur within the pharmacy provider marketplace, or if other issues arise with respect to our pharmacy networks, including the loss of or adverse change in our relationship with one or more key pharmacy providers, our business and results of operations could be adversely affected72% rewritten
- 06If we fail to develop and maintain satisfactory relationships with health care payors, physicians, hospitals and other health service providers and with, producers and consultants, our business and results of operations may be adversely affected39% rewritten
- 07In managing medical practices and operating pharmacies, onsite clinics and other types of medical facilities, we may be subject to additional liability that could result in significant time and expense31% rewritten
- 08There are various risks associated with participating in government-sponsored programs and providing services to payors who participate in government-sponsored programs, including dependence upon government funding, compliance with government contracts, and increased regulatory oversight and enforcement61% rewritten
- 09Our business is subject to substantial government regulation, and new laws or regulations or changes in existing laws or regulations could have a material adverse effect on our business, results of operations, financial condition and liquidity95% rewritten
- 10If we fail to comply with applicable privacy, security and data laws, regulations and standards, our business and reputation could be materially adversely affected91% rewritten
- 11standards and contractual requirements also apply to our vendors and require us to obtain written assurances of their compliance with such requirementsNew
- 12We face risks related to litigation, regulatory audits and investigations56% rewritten
- 13In addition, disclosure of an adverse investigation or audit or the imposition of fines or other sanctions could negatively affect our reputation in certain markets and make it more difficult for us to sell our products and servicesNew
- 14Extensive health care regulation and enforcement, including fraud, waste and abuse laws, could increase our compliance costs, restrict our operations and expose us to significant liabilityNew
Operational Risks
- 15Our business depends on our ability to effectively invest in, improve and properly maintain the uninterrupted operation, availability and data integrity of our information technology and other business systems90% rewritten
- 16and attract clients and customers, establish reserves, report financial results accurately and in a timely manner, and maintain regulatory compliance, among other thingsNew
- 17provide employee awareness training around phishing, malware and other cyber risks; however, such measures may not be effective against all types of security incidentsNew
- 18Our use of artificial intelligence and machine learning present regulatory and legal challenges that could negatively affect our business and our reputation54% rewritten
- 19We are dependent on the success of our relationships with third parties for various services and functions23% rewritten
- 20A significant disruption in service within our operations or among our key suppliers or other third parties could materially adversely affect our business, liquidity and results of operations60% rewritten
- 21We face political, legal, operational, regulatory, economic and other risks in connection with our international operationsNew
- 22Strategic transactions involve risks, and we may not realize the expected benefits because of integration or separation difficulties, underperformance relative to our expectations, and other challenges, which could lead to an impairment charge75% rewritten
- 23Future performance of our business will depend on our ability to execute our strategic and operational initiatives effectively54% rewritten
Financial Risks
- 24Economic and market conditions affect the value of our financial instruments and the value of particular assets and liabilities, investment income, and interest expense
- 25Significant stock market or interest rate declines could result in unfunded pension obligations, resulting in the need for additional plan funding by us and increased pension expenses
- 26A downgrade in the financial strength ratings of our insurance subsidiaries could adversely affect new sales and retention of current business, and a downgrade in our debt ratings would increase the cost of borrowed funds and could negatively affect our ability to access capital
- 27Unfavorable developments in economic conditions may adversely affect our business, results of operations and financial condition
- 28The occurrence of these events have led, and may lead, to a decrease in our customer base, revenues or margins or an increase in our operating costs29% rewritten
- 29We are subject to the credit risk of our reinsurers
Other Cigna Group 10-Ks
- FY2024 10-K risk factors31 risks
Cigna faces intense industry competition and price pressure across health services and pharmacy benefit management operations. Substantial regulatory oversight governs government-sponsored programs, privacy laws, and pharmaceutical manufacturer rebates. IT infrastructure stability and cybersecurity threats are critical operational dependencies for customer data.
Filed Feb 27, 2025
About this page
The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.