CORVEL CORP
For the period ended Dec 31, 2025. Filed Feb 5, 2026.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Dec 31, 2025 · Filed Feb 5, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2025-09-30; filed 2025-11-06.
0001193125-25-269721
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresCurrent report: 10-Q
Period ended 2025-12-31; filed 2026-02-05.
0001193125-26-039480
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 113 previous paragraphs and 113 current paragraphs.
111 unchanged; 2 reworded; 0 added; 0 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 1 previous and 1 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Reworded paragraphs (2)
Previous wording
As these threats evolve, cybersecurity incidents could be more difficult to detect, prevent, and remediate. Cybersecurity-attacks or data handling incidents could remain undetected for some period of time, which could not only result in significant harm to our systems, but also lead to unauthorized access to the information stored on and transmitted by our systems. Further, despite our security efforts and training, our employees may purposefully or inadvertently cause cybersecurity incidents. Any occurence of cybersecurity incidents, whether caused by employees or third parties, could have the potential to impact our relationships with our customers or restrict our ability to meet our customers’ expectations.
Current wording
As these threats evolve, cybersecurity incidents could be more difficult to detect, prevent, and remediate. Cybersecurity-attacks or data handling incidents could remain undetected for some period of time, which could not only result in significant harm to our systems, but also lead to unauthorized access to the information stored on and transmitted by our systems. Further, despite our security efforts and training, our employees may purposefully or inadvertently cause cybersecurity incidents. Any occurrence of cybersecurity incidents, whether caused by employees or third parties, could have the potential to impact our relationships with our customers or restrict our ability to meet our customers’ expectations.
Previous wording
During the three months ended September 30, 2025, the Company repurchased 143,774 shares of its common stock for $12.8 million under the program, reflecting an average price of $89.06 per share. As of September 30, 2025, the Company repurchased 114,707,570 shares of its common stock over the life of the program.
Current wording
During the three months ended December 31, 2025, the Company repurchased 185,559 shares of its common stock for $13.4 million under the program, reflecting an average price of $72.47 per share. As of December 31, 2025, the Company repurchased 114,893,129 shares of its common stock over the life of the program.