CVS Health's biggest risks in the FY2024 10-K
- CVS Health faces intense regulatory scrutiny regarding Medicare rates, drug pricing benchmarks, and health care policy reform.
- The company manages major integration risks from expanding into value-based care through Signify Health and Oak Street Health.
- Cybersecurity, data governance, and information technology failures present significant ongoing threats to operations and reputation.
The risks most specific to CVS Health
- Risks Relating to Our Businesses
Risks Associated with Mergers, Acquisitions, and Divestitures
We may fail to successfully integrate or realize expected benefits from acquisitions like Signify Health and Oak Street Health, or strategic divestitures.
- Risks Relating to Our Businesses
Our Health Care Delivery Businesses Face Unique Risks
Our health care delivery businesses face unique operational and financial risks following our expansion into value-based care and provider enablement services.
- Risks Relating to Our Businesses
We face unique regulatory and other challenges that may inhibit the profitability of our Medicare and Medicaid businesses
CMS final 2025 Medicare Advantage payment rates and a risk score trend increase of 3.86% may inhibit our Medicare business profitability.
- Risks Relating to Our Businesses
Possible changes in industry pricing benchmarks and drug pricing generally can adversely affect our PBM and Pharmacy & Consumer Wellness businesses
Regulators or federal policymakers may replace pricing references like AWP or WAC, adversely affecting our PBM and Pharmacy & Consumer Wellness businesses.
- Risks Relating to Our Businesses
Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results
Minimum Medical Loss Ratio rebate requirements limit our profit margins across Commercial, Medicare Advantage, and Medicaid Insured businesses.
- Risks Related to Our Operations
We and our vendors have experienced and continue to experience cyberattacks. We can provide no assurance that we or our vendors will be able to detect, prevent or contain the effects of such attacks or other information security (including cybersecurity) risks or threats in the future
We and our vendors have experienced diverse cyberattacks, including phishing, malware, and account takeovers, and may fail to prevent future attacks.
- Financial Risks
Goodwill and other intangible assets could, in the future, become impaired
We held $118.6 billion of goodwill and other intangible assets as of December 31, 2024, which could become impaired in future periods.
All 45 risk factors
Headings as the filing states them, in filing order.
Risks Relating to Our Businesses
- 01Risks From Changes in Public Policy and Other Legal and Regulatory Risks
- 02Risks Associated with Mergers, Acquisitions, and Divestitures
- 03Adverse economic conditions in the U.S. and abroad can materially and adversely impact our businesses, operating results, cash flows and financial condition
- 04Each of our segments operates in a highly competitive and evolving business environment; and operating income in the industries in which we compete may decline
- 05Our Health Care Delivery Businesses Face Unique Risks
- 06We can provide no assurance that we will be able to compete successfully on Public Exchanges or that our pricing or other actions will result in the profitability of our Public Exchange products
- 07A change in our Health Care Benefits product mix may adversely affect our profit margins
- 08Negative public perception of the industries in which we operate, or of our industries’ or our practices, can adversely affect our businesses, operating results, cash flows and prospects
- 09We must maintain and improve our relationships with our retail and specialty pharmacy customers and increase the demand for our products and services, including proprietary brands
- 10We face risks relating to the availability, pricing and safety profiles of prescription drugs that we purchase and sell
- 11We are exposed to risks relating to the solvency of other insurers
- 12Extreme events, or the threat of extreme events, could materially impact our businesses
- 13We may be unable to achieve our corporate responsibility and sustainability goals
- 14We are subject to potential changes in public policy, laws and regulations, including reform of the U.S. health care system and entitlement programs, which could have a material adverse effect on our businesses, operations and/or operating results
- 15If we fail to comply with applicable laws and regulations, many of which are highly complex, we could be subject to significant adverse regulatory actions, including monetary penalties, or suffer brand and reputational harm
- 16If our compliance or other systems and processes fail or are deemed inadequate, we may suffer brand and reputational harm and become subject to contractual damages, regulatory actions and/or litigation
- 17We frequently are subject to regular and special governmental audits, investigations and reviews that could result in changes to our business practices and also could result in material refunds, fines, penalties, civil liabilities, criminal liabilities and other sanctions
- 18Our risk profile is changing as we offer new products and services and expand in business areas beyond our historical businesses, and we may face increased regulatory risks related to our vertical integration strategy
- 19We face unique regulatory and other challenges that may inhibit the profitability of our Medicare and Medicaid businesses
- 20Programs funded in whole or in part by the U.S. federal government account for a significant portion of our revenues, and we expect that percentage to increase
- 21Possible changes in industry pricing benchmarks and drug pricing generally can adversely affect our PBM and Pharmacy & Consumer Wellness businesses
- 22We may not be able to obtain adequate premium rate increases in our Insured Health Care Benefits products, which would have an adverse effect on our revenues, MBRs and operating results and could magnify the adverse impact of increases in health care and other benefit costs and of ACA assessments, fees and taxes
- 23Minimum MLR rebate requirements limit the level of margin we can earn in our Insured Health Care Benefits products while leaving us exposed to higher than expected medical costs. Challenges to our minimum MLR rebate methodology and/or reports could adversely affect our operating results
- 24Our operating results may be adversely affected by changes in laws and policies governing employers and by union organizing activity
- 25We face international political, legal and compliance, operational, regulatory, economic and other risks that may be more significant than in our domestic operations
- 26We may be unable to successfully integrate companies we acquire
- 27We may pursue acquisitions, joint ventures, strategic alliances and other inorganic growth opportunities, as well as strategic divestitures, which may be unsuccessful, cause us to assume unanticipated liabilities, disrupt our existing businesses, be dilutive or lead us to assume significant debt, among other things
Risks Related to Our Operations
- 28Failure to meet customer expectations may harm our brand and reputation, our ability to retain and grow our customer base and membership and our operating results and cash flows
- 29We and our vendors have experienced and continue to experience cyberattacks. We can provide no assurance that we or our vendors will be able to detect, prevent or contain the effects of such attacks or other information security (including cybersecurity) risks or threats in the future
- 30Data governance failures can adversely affect our reputation, businesses and prospects. Our use and disclosure of members’, customers’ and other constituents’ personal information is subject to complex regulations at multiple levels
- 31The failure or disruption of our information technology systems or the failure of our information technology infrastructure to support our businesses could adversely affect our reputation, businesses, operating results and cash flows
- 32Our business success and operating results depend in part on effective information technology systems and on continuing to develop and implement improvements in technology. Pursuing multiple initiatives simultaneously could make this continued development and implementation significantly more challenging
- 33Product liability, product recall, professional liability or personal injury issues could damage our reputation and have a significant adverse effect on our businesses, operating results, cash flows and/or financial condition
- 34We face significant competition in attracting and retaining talented employees. Further, managing succession for, and retention of, key executives is critical to our success, and our failure to do so could adversely affect our businesses, operating results and/or future performance
- 35Failure of our businesses to effectively collaborate could prevent us from maximizing our operating results
- 36We are subject to payment-related risks that could increase our operating costs, expose us to fraud or theft, subject us to new rules and other requirements and potential liability and may disrupt our business operations
- 37Both our and our vendors’ operations are subject to a variety of business continuity hazards and risks, any of which could interrupt our operations or otherwise adversely affect our performance and operating results
Financial Risks
- 38We would be adversely affected if we do not effectively deploy our capital. Downgrades or potential downgrades in our credit ratings, should they occur, could adversely affect our brand and reputation, businesses, operating results, cash flows and financial condition
- 39Goodwill and other intangible assets could, in the future, become impaired
- 40Adverse conditions in the U.S. and global capital markets can significantly and adversely affect the value of our investments in debt and equity securities, mortgage loans, alternative investments and other investments, and our operating results and/or our financial condition
Risks Related to Our Relationships with Manufacturers, Providers, Suppliers and Vendors
- 41We face risks relating to the market availability, pricing, suppliers and safety profiles of prescription drugs and other products that we purchase and sell
- 42Our operating results may be adversely affected if we are unable to contract with providers on competitive terms and develop and maintain attractive networks with high quality providers
- 43If our suppliers or service providers fail to meet their contractual obligations to us or to comply with applicable laws or regulations, we may be exposed to brand and reputational harm, litigation and/or regulatory action
- 44We may experience increased medical and other benefit costs, litigation risk and customer and member dissatisfaction when providers that do not have contracts with us render services to our Health Care Benefits members
- 45Continuing consolidation and integration among providers and other suppliers may increase our medical and other covered benefits costs, make it difficult for us to compete in certain geographies and create new competitors
Other CVS Health 10-Ks
- FY2025 10-K risk factors42 risks8 new11 dropped14 reworded
CVS Health faces heightened regulatory pressure in government programs and vertical integration strategies.
Filed Feb 10, 2026
About this page
The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.