{
  "ticker": "CVS",
  "company": "CVS Health Corporation",
  "filing_type": "10-K",
  "year_current": "2024",
  "year_prior": "2023",
  "summary": {
    "added": 1,
    "removed": 1,
    "modified": 8,
    "unchanged": 45,
    "total_current": 54,
    "total_prior": 54
  },
  "source": "SEC EDGAR",
  "url": "https://riskdiff.com/cvs/2024-vs-2023/",
  "markdown_url": "https://riskdiff.com/cvs/2024-vs-2023/index.md",
  "json_url": "https://riskdiff.com/cvs/2024-vs-2023/index.json",
  "access": "public_preview",
  "source_filings": [
    {
      "label": "Find the 2024 10-K for CVS on SEC EDGAR",
      "url": "https://www.sec.gov/edgar/browse/?CIK=CVS&owner=exclude"
    },
    {
      "label": "Find the 2023 10-K for CVS on SEC EDGAR",
      "url": "https://www.sec.gov/edgar/browse/?CIK=CVS&owner=exclude"
    }
  ],
  "generated": "2026-10-16",
  "ai_summary": "Signify and Oak Street acquisitions add major new risks; COVID focus dropped. Regulatory and forecast complexity increase.",
  "ai_brief": {
    "executive_summary": "Signify and Oak Street acquisitions add major new risks; COVID focus dropped. Regulatory and forecast complexity increase.",
    "direction": "more_concerning",
    "top_themes": [
      "Regulatory & Legal",
      "Supply Chain",
      "Climate & ESG"
    ]
  },
  "risks": [
    {
      "status": "ADDED",
      "current_title": "Our recent acquisitions of Signify Health and Oak Street Health subject us to new and additional risks beyond those to which we have been historically subject.",
      "prior_title": null,
      "severity": {
        "deterministic": 9,
        "ai_bump": 0,
        "total": 9,
        "tier": "high",
        "signal_hits": [
          "cyber",
          "workforce"
        ]
      },
      "current_body": "We consummated the Signify Health acquisition in March 2023 through which we expanded our offerings to include health risk assessments, value-based care and provider enablement services, and we also consummated the Oak Street Health acquisition in May 2023 through which we offer multi-payor, senior-focused, value-based primary care for Medicare-eligible patients, broadening our ability to provide primary care services. The Signify Health and the Oak Street Health businesses are subject to many of the risks described in this Item 1A, as well as certain additional risks that are different from the risks our businesses have historically faced. The additional risks to which our Signify Health business is subject include, but are not limited to, the following: •ability to recruit, retain and grow its network of credentialed, high-quality physicians, physician assistants and nurse practitioners to provide clinical services in highly competitive markets for talent; •successful challenges to Signify Health’s treatment of health care providers as independent contractors, which could result in increased costs and subject the business to regulatory sanction; •dependence on a concentrated number of key health plan customers; •the quality of the information received about plan members of such health plans for whom Signify Health will seek to provide in-home evaluations and other services, and the regulatory restrictions and requirements associated with directly contacting plan members; •ability to perform and ensure the quality of health risk assessments; •ability to achieve and receive shared health care cost savings; 44 44 44 •the regulatory and business risks associated with participation in certain government health care programs, including the Medicare Shared Savings Program through Signify Health’s Caravan accountable care organizations (“ACOs”) and identification of diagnosis codes related to risk adjustment payments under Part C of the Medicare program; •health reform initiatives and changes in the rules governing government health care programs, including rules related to the use of in-home health risk assessments; and •use of “open source” software in its technology, which may make it easier for others to gain access or compromise its proprietary technology. The additional risks to which our Oak Street Health business is subject include, but are not limited to, the following: •ability to attract new Medicare-eligible patients and credentialed, high-quality physicians and other providers for senior-focused primary care in a highly competitive market for such patients and providers; •satisfying the enrollment requirements under government health care programs for physicians and other providers in a timely manner; •dependence on a significant portion of revenue from Medicare or Medicare Advantage plans, which subjects Oak Street Health to reductions in Medicare reimbursement rates or changes in the rules governing the Medicare program; •dependence for a significant portion of revenue from agreements with a limited number of key payors with whom Oak Street Health contracts to provide services under terms that may permit a payor to amend the compensation arrangements or terminate the agreements without cause; •dependence on reimbursements from third-party payors, which can result in substantial delay, and on patients, through copayments and deductibles, which subjects Oak Street Health to additional reimbursement risk; •under the fixed fee (or capitated) agreements Oak Street Health enters into with health plans, the assumption of the risk that the actual cost of a service it provides to a patient exceeds the reimbursement provided by the health plan; •reductions in the quality ratings of Medicare health plans Oak Street Health serves could result in a shift of patients from, or the termination of, a health plan Oak Street Health serves; •submission of inaccurate, incomplete or erroneous data, including risk adjustment data, to health plans and government payors could result in inaccuracies in the revenue Oak Street Health records or receipt of overpayments, which may subject it to repayment obligations and penalties; •geographic concentration of its primary care centers; •risks associated with its existing legal proceedings and litigations; •laws regulating the corporate practice of medicine and the associated agreements entered into with physician practice groups restrict the manner in which the Oak Street Health business is able to direct the operations and otherwise exercise control of its physician practice groups; •changes in the legal treatment of its contractual arrangements with its physician practice groups could impact the ability to consolidate the revenue of these groups; and •ability to maintain and enhance its reputation and brand recognition. The additional risks faced by Signify Health and Oak Street Health may also compound, or be heightened by, many of our other risks, including the risks related to adverse economic conditions in the U.S. and abroad, cybersecurity, and compliance with applicable laws and regulations, among others. The Signify Health and the Oak Street Health businesses may also be subject to additional risks the existence or significance of which we may not have anticipated prior to the respective acquisitions of such businesses. Any risks associated with the Signify Health or the Oak Street Health business, if they materialize, could adversely affect our business, financial condition and results of operations, including our ability to timely and effectively integrate the businesses in our operations and the timing and extent of realization of synergies and other benefits that we expected in connection with the acquisitions. Our experience in managing the additional risks associated with the acquisitions is more limited than our experience in managing the risks associated with our historical businesses, and there is no assurance that we will be able to effectively manage or mitigate such risks."
    }
  ],
  "full_url": "https://riskdiff.com/cvs/2024-vs-2023/full/"
}