February saw a potential industry-changing lawsuit against Johnson & Johnson and its plan fiduciaries asserting a breach of fiduciary duties and mismanagement of Johnson & Johnson’s prescription drug benefits program, costing its ERISA plans and employees millions of dollars in the form of higher payments for prescription drugs, as well as higher premiums, deductibles, coinsurance, and copays, resulting in lower wages or limited wage growth. A UnitedHealthcare company, Change Healthcare, was the target of a cyberattack potentially impacting more than 100 million members. Instructions for this June’s RxDC reporting have been updated, moving certain data from vendor aggregating into plan sponsor responsibility. The 2025 Employer Shared Responsibility indexed penalties have been released.