CHEMED CORP

On October 24, 2025, VITAS Healthcare (“VITAS”), a subsidiary of Chemed Corporation (the “Company”), learned that an account belonging to a third-party vendor attempted to deploy a tool often used by threat actors in VITAS’ information technology environment (the “Environment”). VITAS’ security team took immediate actions to contain and remove the intrusion, implemented remedial measures, and notified the third-party vendor in accordance with its cyber incident response process. VITAS and external cybersecurity experts began an investigation into the incident.

Through continued investigation, VITAS ascertained certain information, including protected health information (“PHI”) of VITAS’ current and former patients, was viewed. Additionally, on October 29, VITAS received a notice from a threat actor claiming to have unlawfully accessed the Environment and taken significant amounts of data, threatening to release the data if VITAS does not provide them with a monetary payment.

VITAS is still investigating the extent of compromise of PHI and other sensitive information and has notified law enforcement of the incident. As the investigation of the incident is ongoing, the full scope, nature and impact of the incident are not yet completely known. VITAS is evaluating what regulatory and legal notifications are required as a result of this incident and will make such notifications as required based on its findings.

-44-

As of the date hereof, the incident has not had a material impact on VITAS or the Company’s operations, financial systems, or its financial condition. VITAS believes it has contained the incident and believes that the intrusion was limited to data theft and did not, and is not expected to, materially affect the operation of the Environment or its financial or operational systems.

While VITAS believes it has contained the incident, VITAS and the Company continue to investigate this matter to determine the full extent of the impact on VITAS and the Company.

‎

-45-