UnitedHealth Shareholders Allege Company Prioritized Deal Over Security

Two of UnitedHealth's long-time shareholders have filed a shareholder derivative suit against the company's board and top executives. The plaintiffs, Länsförsäkringar Fondförvaltning and Rhode Island's public employees' pension fund, claim that the defendants directed or knowingly permitted 'corporate governance failures on a historic scale'. These alleged failures include the Medicare Advantage upcoding scheme, algorithmic denials of care, and a data breach at Change Healthcare.

The suit alleges that UnitedHealth told regulators and the public that 'firewalls' would keep competitors' sensitive data walled off from its own insurance business. However, internal documents obtained by the plaintiffs suggest that the real story is that UnitedHealth wanted to combine Optum division and Change so fully that unwinding the deal would be nearly impossible if the Department of Justice's pending appeal succeeded in blocking it.

The amended complaint now frames the data breach as a predictable result of an integration deliberately sped up to outrun litigation risk. The plaintiffs claim that this rush left Change's systems exposed, resulting in the theft of sensitive information from 190 million Americans.