Fiscal period ending 2025-12-31 versus 2024-12-31
— view filing on EDGAR →
Cybersecurity and competitive risks drove a broad worsening, with service disruption now explicitly linked to liquidity risk — a meaningful escalation from operational to financial viability concern. The FTC settlement and reduced pharmacy chain concentration provide partial offsets, but new generative AI exposures, expanded competitive threats, a completed HHS OCR audit, and heightened strategic execution risk leave the net picture materially worse. No solvency or going-concern trigger is present, but the accumulation of worsening across four distinct themes keeps intensity at moderate.
2 company-specific
· 2 eased/removed
· 5 common-mode
Company-specific changes
Revised
Company disclosed actual HHS OCR audit completion in 2025 with potential for subsequent compliance reviews. Prior year only mentioned pending December 2024 request, creating new enforcement risk visibility.
If we fail to comply with applicable privacy, security and data laws, regulations and standards, our business and reputation could be materially adversely affected. Most of our activities involve the…
Revised
New explicit acknowledgment that "strategic execution risk may be heightened by the complexity across our pharmacy services and health care businesses" escalates the risk characterization from generic to specific.
Future performance of our business will depend on our ability to execute our strategic and operational initiatives effectively. The future performance of our business depends on our ability to…
Eased / removed
Revised
FTC settlement reached in February 2026 with no monetary penalty, fault finding, or admission of liability materially eases prior litigation risk exposure.
We face risks related to litigation, regulatory audits and investigations. We are routinely involved in legal matters arising from our health services business, including but not limited to claims…
Revised
Top 10 pharmacy chains' market concentration decreased from 60% to 47%, reducing customer concentration risk and improving negotiating position.
If significant changes occur within the pharmacy provider marketplace, or if other issues arise with respect to our pharmacy networks, including the loss of or adverse change in our relationship with…
Also disclosed — common-mode (AI regulatory compliance, Generative AI competition disruption, Healthcare drug pricing regulation, AI cybersecurity escalation, Energy infrastructure capacity constraints)
AI regulatory compliance
Revised
New specific risks from generative AI added: hallucinations, inaccurate/biased output, reputational damage. Expanded scope beyond prior ML/AI governance to emerging generative AI technology risks.
Our use of artificial intelligence and machine learning present regulatory and legal challenges that could negatively affect our business and our reputation . Our use of AI and ML technologies, as…
Generative AI competition disruption
Revised
New emphasis on large client concentration risk and rebate-free model implementation as competitive response, signaling intensified pharmacy competition and customer retention pressure.
Risks Related to Our Business as a Health Company We must predict, price for and manage health care costs appropriately. We face price competition and other pressures that could compress our margins…
Healthcare drug pricing regulation
Revised
Expanded competitive risk disclosure: added specific threats (government drug pricing involvement, reputation/ESG pressures, social media risks, customer contract execution failures) and emphasized need to demonstrate superior value or face material adverse effects.
We operate in a highly competitive and evolving business environment, and our failure to compete effectively or differentiate our products and services from those of our competitors could materially…
AI cybersecurity escalation
Revised
Added explicit cyberattack risk, third-party system failures, and service denial scenarios. Escalates from general IT maintenance to specific operational disruption threats.
Operational Risks Our business depends on our ability to effectively invest in, improve and properly maintain the uninterrupted operation, availability and data integrity of our information…
Energy infrastructure capacity constraints
Revised
Addition of "liquidity" as a potential adverse effect from service disruptions elevates the risk from operational to financial viability, signaling heightened concern about cash flow impact.
A significant disruption in service within our operations or among our key suppliers or other third parties could materially adversely affect our business, liquidity and results of operations. Our…