Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - CYH
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
Our business faces a variety of risks. If any of the events or circumstances described in any of the following risk factors occurs, our business, results of operations or financial condition could be materially and adversely affected, and our actual results may differ materially from those predicted in any forward-looking statements we make in any public disclosures. The considerations and risks that follow are organized within relevant headings but may be relevant to other headings as well. Additional factors that could affect our business, results of operations and financial condition are discussed elsewhere in this Report (including in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of this Form 10-K). Moreover, risks or uncertainties not presently known to us, or that we currently deem immaterial, also may adversely affect our business, results of operations and financial condition.
Summary of Risk Factors
The following is a summary of the risk factors set forth below.
Risks Related to Our Indebtedness
Risks Related to Economic Conditions
Risks Related to Our Business
Risks Related to Human Capital
27
Risks Related to Legal Proceedings
Risks Related to Government Regulation
Risks Related to Impairment
Risks Related to Cybersecurity and Technology
For a more complete discussion of these risk factors, see below. For a more complete discussion of these risk factors, see below.
Risks Related to Our Indebtedness
Our level of indebtedness could adversely affect our ability to refinance existing indebtedness or raise additional capital to fund our operations, limit our ability to react to changes in the economy or our industry and prevent us from meeting our obligations under the agreements related to our indebtedness.
We have a significant amount of indebtedness, which is more fully described in the Liquidity and Capital Resources section of “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of this Form 10-K and Note 6 of the Notes to Consolidated Financial Statements included under Part II, Item 8 of this Form 10-K. We have a significant amount of indebtedness, which is more fully described in the Liquidity and Capital Resources section of “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of this Form 10-K and Note 6 of the Notes to Consolidated Financial Statements included under Part II, Item 8 of this Form 10-K. The maximum aggregate principal amount under the ABL Facility is $1.0 billion, subject to borrowing base capacity. At December 31, 2025, we had no outstanding borrowings and approximately $786 million of additional borrowing capacity (after taking into consideration $34 million of outstanding letters of credit) under the ABL Facility. At December 31, 2023, we had outstanding borrowings of $247 million and approximately $637 million of additional borrowing capacity (after taking into consideration $81 million of outstanding letters of credit) under the ABL Facility. At December 31, 2023, we had outstanding borrowings of $247 million and approximately $637 million of additional borrowing capacity (after taking into consideration $81 million of outstanding letters of credit) under the ABL Facility.
Our substantial leverage could have important consequences, including the following:
28
Despite current indebtedness levels, we may still be able to incur substantially more debt. This could further exacerbate the risks described in this section.
We and our subsidiaries have the ability to incur substantial additional indebtedness in the future, subject to restrictions contained in the ABL Facility and the indentures governing our outstanding notes. We and our subsidiaries have the ability to incur substantial additional indebtedness in the future, subject to restrictions contained in the ABL Facility and the indentures governing our outstanding notes. The maximum aggregate principal amount under the ABL Facility is $1.0 billion, subject to borrowing base capacity. At December 31, 2025, we had no outstanding borrowings and approximately $786 million of additional borrowing capacity (after taking into consideration $34 million of outstanding letters of credit) under the ABL Facility. At December 31, 2023, we had outstanding borrowings of $247 million and approximately $637 million of additional borrowing capacity (after taking into consideration $81 million of outstanding letters of credit) under the ABL Facility. At December 31, 2023, we had outstanding borrowings of $247 million and approximately $637 million of additional borrowing capacity (after taking into consideration $81 million of outstanding letters of credit) under the ABL Facility. The aggregate amount we may draw under the ABL Facility may not exceed the “borrowing base” (as calculated thereunder) less outstanding letters of credit thereunder, which fluctuates from time to time. Aside from the ABL Facility, our ability to incur other additional secured debt (other than secured debt used to refinance existing secured debt) is highly limited by certain of the indentures governing our outstanding notes. If additional indebtedness is added to our current debt levels, the related risks that we currently face related to indebtedness as noted in this section could increase.
We may not be able to generate sufficient cash to service all of our indebtedness, and we may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful. We may not be able to generate sufficient cash to service all of our indebtedness, and we may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful.
Our ability to make scheduled payments on or to refinance our indebtedness depends on our financial and operating performance, which is subject to prevailing economic and competitive conditions and to financial, business, regulatory and other factors beyond our control. Our ability to make scheduled payments on or to refinance our indebtedness depends on our financial and operating performance, which is subject to prevailing economic and competitive conditions and to financial, business, regulatory and other factors beyond our control. We cannot assure you that we will maintain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness.
In addition, the borrower under the ABL Facility and issuer of our outstanding notes is a holding company with no direct operations. In addition, the borrower under the ABL Facility and issuer of our outstanding notes is a holding company with no direct operations. Its principal assets are the equity interests we hold in our operating subsidiaries. As a result, we are dependent upon dividends and other payments from our subsidiaries to generate the funds necessary to meet our outstanding debt service and other obligations. Our subsidiaries may not generate sufficient cash from operations to enable us to make principal and interest payments on our indebtedness. In addition, any payments of dividends, distributions, loans or advances to us by our subsidiaries could be subject to legal and contractual restrictions.
Our subsidiaries are permitted under the terms of our indebtedness to incur additional indebtedness that may restrict payments from those subsidiaries to us. The agreements governing the current and future indebtedness of our subsidiaries may not permit those subsidiaries to provide us with sufficient cash to fund payments on our indebtedness when due. Our non-guarantor subsidiaries are separate and distinct legal entities, and they have no obligation, contingent or otherwise, to pay amounts due under the terms of our indebtedness or to make any funds available to pay those amounts, whether by dividend, distribution, loan or other payment. If our cash flows and capital resources are insufficient to fund our debt service obligations, we could face substantial liquidity problems and may be forced to reduce or delay capital expenditures, sell assets or operations, seek additional capital or restructure or refinance our indebtedness. Our ability to refinance our indebtedness on favorable terms, or at all, is directly affected by the then current macroeconomic conditions, financial and capital market conditions as well as the then current interest rate environment. In addition, our ability to incur additional secured indebtedness (which would generally enable us to achieve better pricing than the incurrence of unsecured indebtedness) depends in part on the value of our assets, which depends, in turn, on the strength of our cash flows and results of operations, and on economic and market conditions and other factors. We may find it necessary or prudent to refinance certain of our outstanding indebtedness, the terms of which may not be favorable to us.
We cannot assure you that we would be able to take any of these actions, that these actions would be successful and permit us to meet our scheduled debt service obligations or that these actions would be permitted under the terms of our existing or future debt agreements, including the ABL Facility and the indentures governing our outstanding notes. For example, the ABL Facility and the indentures governing our outstanding notes restrict our ability to dispose of certain assets and use the proceeds from any dispositions. We may not be able to consummate those dispositions and any proceeds we receive may not be adequate to meet any debt service obligations then due.
29
We have a substantial amount of indebtedness under certain series of our outstanding notes and other debt scheduled to mature in close proximity to each other.
As further described in the Liquidity and Capital Resources section of “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of this Form 10-K and Note 6 of the Notes to Consolidated Financial Statements included under Part II, Item 8 of this Form 10-K, we have a substantial amount of indebtedness under certain series of our outstanding notes and other debt scheduled to mature in close proximity to each other. As a result, we may not have sufficient cash to repay all amounts owing under such indebtedness and there can be no assurance that we will have the ability to borrow or otherwise raise the amounts necessary to repay all such amounts, and the prior maturity of such other substantial indebtedness may make it difficult to refinance the notes or repay them at maturity. Our ability to refinance our indebtedness on favorable terms, or at all, is dependent on (among other things) conditions in the credit and capital markets, which are beyond our control.
Restrictive covenants in the agreements governing our indebtedness may adversely affect us. Restrictive covenants in the agreements governing our indebtedness may adversely affect us.
The ABL Facility and the indentures governing our outstanding notes contain various covenants that limit our ability to take certain actions, including our ability to:
In addition, the ABL Facility contains restrictive covenants and may, in certain circumstances, require us to maintain a specified financial ratio and satisfy other financial condition tests. In addition, the ABL Facility contains restrictive covenants and may, in certain circumstances, require us to maintain a specified financial ratio and satisfy other financial condition tests. Our ability to meet these restrictive covenants and financial ratio and tests (if applicable) may be affected by events beyond our control, and we cannot assure you that we will meet those tests.
In addition, our ability to incur additional secured debt (other than (i) secured debt to refinance existing secured debt and (ii) indebtedness incurred under our ABL Facility) is highly limited.
A breach of any of these covenants could result in a default under the ABL Facility and the indentures governing our outstanding notes. A breach of any of these covenants could result in a default under the ABL Facility and the indentures governing our outstanding notes. Upon the occurrence of an event of default under the ABL Facility or any of the indentures governing our outstanding notes, all amounts outstanding under the applicable indebtedness may become immediately due and payable and all commitments under the ABL Facility to extend further credit may be terminated. If we were unable to repay those amounts, the holders of such indebtedness could, subject to applicable intercreditor agreements, proceed against the collateral granted to them to secure that indebtedness. If holders of any of our indebtedness accelerate the maturity date of any of our indebtedness, we cannot assure you that we will have sufficient assets to repay the indebtedness that has been accelerated (and all other indebtedness that is also accelerated by virtue of applicable cross-acceleration provisions in the agreements governing our indebtedness).
Higher interest rates could increase the cost of refinancing our indebtedness and could cause our debt service obligations to increase significantly.
The current high interest rate environment has adversely impacted us, and could continue to adversely impact us. If interest rates remain at their current levels or increase, this could adversely impact our ability to refinance existing indebtedness or obtain additional debt financing on acceptable terms or at all, and otherwise could increase our debt service obligations in connection with future debt refinancings. If interest rates remain at their current elevated levels or continue to increase, this could adversely impact our ability to refinance existing indebtedness or obtain additional debt financing on acceptable terms or at all, and otherwise could increase our debt service obligations in connection with future debt refinancings. In addition, any borrowings under the ABL Facility are at variable rates of interest and expose us to interest rate risk. If interest rates increase, our debt service obligations on such variable rate indebtedness would increase even though the amount borrowed remained the same, and our profitability would be negatively impacted. As of December 31, 2025, we had no outstanding borrowings under the ABL Facility. As of December 31, 2023, we had outstanding borrowings of $247 million under the ABL Facility.
30
If we default on our obligations to pay our indebtedness, or if we otherwise fail to comply with the various covenants in the instruments governing our indebtedness, we could be in default under the terms of the agreements governing our indebtedness.
If we are unable to generate sufficient cash flow and are otherwise unable to obtain funds necessary to meet required payments of principal, premium, if any, and interest on our indebtedness, or if we otherwise fail to comply with the various covenants, including financial and operating covenants, in the instruments governing our indebtedness, including covenants in the ABL Facility and the indentures governing our outstanding notes, we could be in default under the terms of the agreements governing such indebtedness. If we are unable to generate sufficient cash flow and are otherwise unable to obtain funds necessary to meet required payments of principal, premium, if any, and interest on our indebtedness, or if we otherwise fail to comply with the various covenants, including financial and operating covenants, in the instruments governing our indebtedness, including covenants in the ABL Facility and the indentures governing our outstanding notes, we could be in default under the terms of the agreements governing such indebtedness. In the event of any default, the holders of such indebtedness could elect to declare all the funds borrowed to be immediately due and payable, together with accrued and unpaid interest; the lenders under the ABL Facility could elect to terminate their commitments thereunder, cease making further loans and direct the applicable collateral agents to institute foreclosure proceedings against our assets; and we could be forced into bankruptcy or liquidation. If our operating performance declines, we may in the future need to obtain waivers from the required lenders under the ABL Facility to avoid being in default. If we breach our covenants under the ABL Facility and seek a waiver, we may not be able to obtain a waiver from the required lenders. If this occurs, we would be in default under the ABL Facility, the lenders could exercise their rights, as described above, and we could be forced into bankruptcy or liquidation.
Risks Related to Economic Conditions
Our financial results have been, and may continue to be, adversely impacted by challenging macroeconomic conditions.
Economic conditions in the United States continue to be challenging in certain respects, and the United States economy has experienced significant inflationary pressures in recent periods, elevated interest rates, challenging labor market conditions, impacts from the imposition of, or changes in, tariffs, and uncertainty and possible adverse effects associated with political and geopolitical instability. Taking into account these factors, we have incurred in certain recent periods, and may continue to incur, increased expenses arising from factors such as wage inflation for permanent employees, and increased rates for outsourced medical specialists. Taking into account these factors, we have incurred in certain recent periods, and may continue to incur, increased expenses arising from factors such as wage inflation for permanent employees, increased rates for and utilization of temporary contract labor (including contract nursing personnel), and increased rates for outsourced medical specialists. Moreover, if economic conditions in the United States significantly deteriorate, any such developments could materially and adversely affect our results of operations, financial position, and/or our cash flows.
Other risks we face, particularly during periods of economic weakness include potential declines in the population covered by commercial insurance, increased patient decisions to postpone or cancel elective and non-emergency healthcare procedures (including delaying surgical procedures), which may lead to poorer health and higher acuity interventions, potential increases in the uninsured and underinsured populations, increased adoption of health plan structures that shift financial responsibility to patients, and increased difficulties in collecting patient receivables for copayment and deductible receivables. Other risks we face during periods of economic weakness include potential declines in the population covered under commercial insurance agreements, increased patient decisions to postpone or cancel elective and non-emergency healthcare procedures (including delaying surgical procedures), which may lead to poorer health and higher acuity interventions, potential increases in the uninsured and underinsured populations, increased adoption of health plan structures that shift financial responsibility to patients, and increased difficulties in collecting patient receivables for copayment and deductible receivables. In addition, challenging macroeconomic conditions in the United States (including elevated interest rates) have had, and may continue to have, an adverse impact on capital and financial market conditions, which could limit our ability to refinance existing indebtedness or obtain additional debt or equity financing on acceptable terms or at all. In addition, negative macroeconomic conditions in the United States (including elevated interest rates) have had, and may continue to have, an adverse impact on capital market conditions, which could limit our ability to refinance existing indebtedness or obtain additional debt or equity financing on acceptable terms or at all. Challenging macroeconomic conditions in the United States have also resulted in, and may continue to result in, increased budget deficits at federal, state and local governmental levels, which may negatively impact government spending for health and human services programs, including Medicare, Medicaid and similar programs that represent significant third-party payor sources for our healthcare facilities. In addition, negative macroeconomic conditions in the United States have resulted in, and may continue to result in, increased budget deficits at federal, state and local governmental levels, which may continue to negatively impact spending for health and human services programs, including Medicare, Medicaid and similar programs, which represent significant third-party payor sources for our healthcare facilities. Moreover, it is difficult to predict whether, when, or what additional deficit or other spending reduction initiatives may be proposed by Congress, but future legislation may include or otherwise result in additional Medicare and Medicaid spending reductions, which may adversely affect our business and financial results. Moreover, it is difficult to predict whether, when, or what additional deficit reduction initiatives may be proposed by Congress, but future legislation may include additional Medicare spending reductions, which may adversely affect our business and financial results due to our reliance on Medicare payments. Further, there is ongoing uncertainty regarding the federal budget and federal spending levels, including the possible impacts of a failure to increase the “debt ceiling.” Any U.S. government default on its debt could have broad macroeconomic effects. In addition, any shutdown of the federal government, failure to enact annual appropriations, or other lapses in appropriations, hold on congressionally authorized spending or interruptions in the distribution of governmental funds could adversely affect our financial results.
Risks Related to Our Business
If we are unable to complete divestitures as we may deem advisable, our results of operations and financial condition could be adversely affected.
We have divested certain of our hospitals and non-hospital businesses in recent years, and may give consideration to divesting certain additional hospitals and non-hospital businesses. We have divested certain of our hospitals and non-hospital businesses in recent years, and may give consideration to divesting certain additional hospitals and non-hospital businesses. For a description of recent divestitures, see “Acquisition, Divestiture and Closure Activity” under Part II, Item 7 of this Form 10-K. Generally, these hospitals and non-hospital businesses are not in one of our strategically beneficial service areas, are less complementary to our business strategy and/or have lower operating margins. In addition, we continue to receive interest from potential acquirers for certain of our hospitals and non-hospital businesses. As such, we may divest additional hospitals and/or non-hospital businesses if we consider any such disposition to be in our best interests. As such, we may sell additional hospitals and/or non-hospital businesses if we consider any such disposition to be in our best interests. However, there is no assurance that potential divestitures will be completed or, if they are completed, the aggregate amount of proceeds we will receive, that potential divestitures will be completed within our targeted timeframe, or that potential divestitures will be completed on
31
terms favorable to us. Moreover, the current challenging macroeconomic environment may make it more difficult for us to complete divestitures on acceptable terms, or at all. Moreover, the current negative macroeconomic environment may make it more difficult for us to complete divestitures on acceptable terms, or at all. Additionally, the results of operations for these hospitals and non-hospital businesses that we may divest and the potential gains or losses on the sales of those businesses may adversely affect our results of operations. We may also incur asset impairment charges related to potential or completed divestitures that reduce our profitability. In addition, after entering into a definitive agreement, we may be subject to the satisfaction of pre-closing conditions as well as necessary regulatory and governmental notices and approvals, which, if not satisfied or obtained, may prevent us from completing the sale. Divestitures may also involve continued financial exposure related to the divested business, such as through indemnities or retained obligations, that present risk to us.
Any future divestiture activities may present financial, managerial, and operational risks. Any future divestiture activities may present financial, managerial, and operational risks. Those risks include diversion of management attention from improving existing operations; additional restructuring charges and the related impact from separating personnel, renegotiating contracts, and restructuring financial and other systems; adverse effects on existing business relationships with patients and third-party payors; and the potential that the collectability of any patient accounts receivable retained from any divested hospital may be adversely impacted. Any of these factors could adversely affect our financial condition and results of operations.
The impact of past acquisitions, as well as potential future acquisitions, could have a negative effect on our operations. The impact of past acquisitions, as well as potential future acquisitions, could have a negative effect on our operations.
Our business strategy has historically included growth by acquisitions, and we may complete additional acquisitions in the future. Our business strategy has historically included growth by acquisitions, and we may complete additional acquisitions in the future. However, not-for-profit hospital systems and other for-profit hospital companies generally attempt to acquire the same type of hospital as we may desire to acquire. Some of the competitors for our acquisitions have greater financial resources than we have. Furthermore, some hospitals are sold through an auction process, which may result in higher purchase prices than we believe are reasonable. Therefore, we may not be able to acquire additional hospitals on terms favorable to us.
In addition, many of the hospitals we have previously acquired have had lower operating margins than we do and operating losses incurred prior to the time we acquired them. In addition, many of the hospitals we have previously acquired have had lower operating margins than we do and operating losses incurred prior to the time we acquired them. Hospitals or other businesses acquired in the future may have similar financial performance issues. In the past, we have experienced difficulties and delays in improving the operating margins or effectively integrating the operations of certain acquired hospitals and other businesses. In the past, we have experienced delays in improving the operating margins or effectively integrating the operations of certain acquired hospitals and other businesses. In the future, if we are unable to improve the operating margins of acquired hospitals or other businesses, operate them profitably, or effectively integrate their operations, our results of operations and business may be adversely affected.
Moreover, hospitals or other businesses that we have acquired, or in the future could acquire, may have unknown or contingent liabilities, including liabilities associated with ongoing legal proceedings or for failure to comply with healthcare laws and regulations. Moreover, hospitals or other businesses that we have acquired, or in the future could acquire, may have unknown or contingent liabilities, including liabilities associated with ongoing legal proceedings or for failure to comply with healthcare laws and regulations. Although we generally seek indemnification from sellers covering these matters, we may nevertheless have material liabilities for past activities of acquired hospitals and other businesses.
If we are unable to effectively compete, patients could use other hospitals and healthcare providers, and our business may be adversely impacted. If we are unable to effectively compete, patients could use other hospitals and healthcare providers, and our business may be adversely impacted.
The healthcare industry is highly competitive among hospitals, other healthcare providers and other industry participants, for patients, affiliations with physicians and other personnel and acquisitions. Generally, other hospitals and healthcare facilities, including specialized care providers such as outpatient surgery, orthopedic, oncology and diagnostic centers, in our service areas provide services similar to those we offer. Many individuals are seeking a broader range of services at outpatient facilities as a result of the growing availability of outpatient facilities, the increase in payor reimbursement policies that restrict inpatient coverage and the increase in services that can be provided on an outpatient basis, among other factors. Changes in licensure or other regulations, recognition of new provider types or payment models and industry consolidation could negatively impact our competitive position. For example, in states with CON or similar prior approval requirements, removal of these requirements could remove barriers to entry and increase competition in our service areas. For example, in states with certificate of need or similar prior approval requirements, removal of these requirements could remove barriers to entry and increase competition in our service areas. Our hospitals, our competitors, and other healthcare industry participants are increasingly implementing physician alignment strategies, such as acquiring physician practice groups, employing physicians and participating in ACOs or other clinical integration models, which may negatively affect our competitive position, including by impacting our recruiting and retention efforts. Our hospitals, our competitors, and other healthcare industry participants are increasingly implementing physician alignment strategies, such as acquiring physician practice groups, employing physicians and participating in ACOs or other clinical integration models. Increasing consolidation within the payor industry, vertical integration efforts involving payors and healthcare providers and cost-reduction strategies by payors, large employer groups and their affiliates may impact our ability to contract with payors on favorable terms and participate in favorable payment tiers or provider networks and otherwise may affect our competitive position. Increasing consolidation within the 29 payor industry, vertical integration efforts involving payors and healthcare providers, and cost-reduction strategies by payors, large employer groups and their affiliates may impact our ability to contract with payors on favorable terms, participate in favorable payment tiers or provider networks, and otherwise affect our competitive position. Legislative and regulatory initiatives, such as changes in Texas law that eliminated restrictions on tiered networks and permit insurers to use financial incentives to steer patients to particular providers, may accelerate or otherwise impact these trends. Legislative and regulatory initiatives, such as changes in Texas law that eliminated restrictions on tiered networks and steering patients to particular providers, may accelerate or otherwise impact these trends.
The majority of our hospitals are located in generally larger non-urban service areas in which we believe we are the primary, if not the sole, provider of general acute care health services. The majority of our hospitals are located in generally larger non-urban service areas in which we believe we are the primary, if not the sole, provider of general acute care health services. As a result, the most significant competition for providers of general acute care services are hospitals outside of our primary service areas, typically hospitals in larger urban areas that provide more complex
32
services. Patients in our primary service areas may travel to other hospitals because of physician referrals, payor networks that exclude our providers or the need for services we do not offer, among other reasons. Patients who receive services from these other hospitals may subsequently shift their preferences to those hospitals for the services we provide.
Our hospitals that are located in urban service areas may face competition from hospitals that are more established than our hospitals. Some of our competitors offer services, including extensive medical research and medical education programs, which are not offered by our facilities. In addition, in certain markets where we operate, there are large teaching hospitals that provide highly specialized facilities, equipment and services that may not be available at our hospitals.
At December 31, 2025, 33 of our hospitals competed with one or more non-affiliated hospitals in their respective primary service areas. In most markets in which we are not the sole provider of general acute care health services, our primary competitor is a municipal or not-for-profit hospital. These hospitals are owned by tax-supported governmental agencies or not-for-profit entities supported by endowments and charitable contributions. These hospitals are exempt from sales, property and income taxes. Such exemptions and support are not available to our hospitals and may provide the tax-supported or not-for-profit entities an advantage in funding general and capital expenditures and offering services more specialized than those available at our hospitals. If our competitors are better able to attract patients with these offerings, we may experience an overall decline in patient volume.
Trends toward transparency and value-based purchasing may also have an impact on our competitive position, ability to obtain and maintain favorable contract terms, and patient volumes in ways that are difficult to predict. Trends toward transparency and value-based purchasing may have an impact on our competitive position, ability to obtain and maintain favorable contract terms, and patient volumes in ways that are difficult to predict. CMS websites make available to the public certain data that hospitals and various other types of Medicare-certified providers submit in connection with Medicare reimbursement claims, including performance data related to quality measures and patient satisfaction surveys. If any of our hospitals or other provider types achieve poor results (or results that are lower than our competitors) on quality measures or on patient satisfaction surveys, we may attract fewer patients. If any of our hospitals achieve poor results (or results that are lower than our competitors) on the quality measures or on patient satisfaction surveys, or if our standard charges are higher than our competitors, we may attract fewer patients. Further, every hospital must establish and update annually a public, online listing of the hospital’s standard charges for all items and services, including discounted cash prices and payor-specific charges, and must also publish a consumer-friendly list of standard charges for certain “shoppable” services or maintain an online price estimator tool for the shoppable services. HHS also requires health insurers to publish online charges negotiated with providers for healthcare services, and health insurers must provide online price comparison tools to help individuals get personalized cost estimates for all covered items and services.
The No Surprises Act creates additional price transparency requirements that may impact our competitive position, including requiring providers to send uninsured or self-pay patients and health plans of insured patients a good faith estimate of the expected charges and diagnostic codes prior to the scheduled date of the service or item or upon request. The No Surprises Act creates additional price transparency requirements that may impact our competitive position, including requiring providers to send uninsured or self-pay patients and health plans of insured patients a good faith estimate of the expected charges and diagnostic codes prior to the scheduled date of the service or item or upon request. Until HHS issues additional regulations, HHS is deferring enforcement of portions of the good faith estimate requirements. It is unclear how price transparency requirements and similar initiatives will affect consumer behavior, our relationships with payors, or our ability to set and negotiate prices, but our competitive position could be negatively affected if our standard charges are higher or are perceived to be higher than the charges of our competitors. It is unclear how price transparency requirements and similar initiatives will affect consumer behavior, our relationships with payors, or our ability to set and negotiate prices.
We expect these competitive trends to continue. We expect these competitive trends to continue. We pursue various strategies intended to ensure our hospitals and other facilities are competitive, including by enhancing outpatient service offerings, offering competitive pricing to group purchasers of healthcare services, upgrading facilities and equipment, exploring new and expanded services and programs and engaging quality physicians and other skilled clinical personnel. However, if we are unable to compete effectively with other hospitals and other healthcare providers and patients seek healthcare services at providers other than our hospitals and affiliated businesses, we could experience declines in patient volumes, which could adversely affect our business.
We may be adversely affected by consolidation among health insurers and other industry participants. We may be adversely affected by consolidation among health insurers and other industry participants.
In recent years, a number of health insurers have merged or increased efforts to consolidate with other non-governmental payors. In recent years, a number of health insurers have merged or increased efforts to consolidate with other non-governmental payors. Insurers are also increasingly pursuing vertical integration or other alignment initiatives with healthcare providers. Insurers are also increasingly pursuing alignment initiatives with healthcare providers. Consolidation within the health insurance industry may result in insurers having increased negotiating leverage and competitive advantages, such as greater access to performance and pricing data. Our ability to negotiate prices and favorable terms in our contracts with health insurers in certain markets could be affected negatively as a result of this consolidation. Our ability to negotiate prices and favorable terms with health insurers in certain markets could be affected negatively as a result of this consolidation. We cannot predict whether we will be able to negotiate favorable terms with payors and otherwise respond effectively to the impact of increased consolidation in the payor industry or vertical integration efforts.
We may also be affected by consolidation among other healthcare industry participants. We may be adversely affected by consolidation among health insurers and other industry participants. For example, many providers are implementing physician alignment strategies, such as employing physicians, acquiring physician practice groups and participating in ACOs or other clinical integration models. Consolidation among other healthcare industry participants may intensify competitive pressure and affect the industry in ways that are difficult to predict.
33
The failure to obtain our medical supplies at favorable prices could cause our operating results to decline.
We have a participation agreement with HealthTrust, a GPO. We have a participation agreement with HealthTrust, a GPO. The current term of this agreement extends through the end of December 2026, with automatic renewal terms of one year, unless either party terminates by giving notice of non-renewal. GPOs attempt to obtain favorable pricing on medical supplies with manufacturers and vendors, sometimes by negotiating exclusive supply arrangements in exchange for discounts. GPOs attempt to obtain favorable pricing on medical supplies with manufacturers and vendors, sometimes by negotiating exclusive supply arrangements in exchange for discounts. To the extent these exclusive supply arrangements are challenged or deemed unenforceable, we could incur higher costs for our medical supplies obtained through HealthTrust. Further, costs of supplies and drugs may continue to increase due to various factors, including market pressure from pharmaceutical companies, new product releases, supply shortages and supply chain disruptions, including as a result of the imposition of tariffs or changes in U.S. trade policy. Also, there can be no assurance that our arrangement with HealthTrust will provide the discounts we expect to achieve.
If reimbursement rates paid by federal or state healthcare programs or commercial payors are reduced, if we are unable to maintain favorable contract terms with payors or comply with our payor contract obligations, if insured individuals move to insurance plans with greater coverage exclusions or narrower networks or if insurance coverage is otherwise restricted or reduced, our net operating revenues may decline. If reimbursement rates paid by federal or state healthcare programs or commercial payors are reduced, if we are unable to maintain favorable contract terms with payors or comply with our payor contract obligations, if insured individuals move to insurance plans with greater coverage exclusions or narrower networks, or if insurance coverage is otherwise restricted or reduced, our net operating revenues may decline.
During the year ended December 31, 2025, 33.4% of our net operating revenues came from the Medicare and Medicaid programs. During the year ended December 31, 2023, 34.2% of our net operating revenues came from the Medicare and Medicaid programs. However, as healthcare expenditures continue to increase, federal and state governments have made, and continue to make, significant changes in the Medicare and Medicaid programs. These changes may include reductions in reimbursement levels and supplemental payments, funding restrictions, limitations on scope of coverage or patient eligibility, changes affecting utilization review and new or modified Medicaid waiver programs. These and other changes may impact the scale and scope of the Medicare and Medicaid programs, may affect the cost of providing services to patients, and may decrease the amount of money we receive for our services relating to the Medicare and Medicaid programs. For example, as a result of sequestration measures that extend through the first five months of federal fiscal year 2033, Medicare payments are automatically reduced by 2% per fiscal year. For example, as a result of sequestration measures that extend through April 2032, Medicare payments are automatically reduced by 2%. It is difficult to predict whether, when or what other deficit reduction initiatives may be proposed by Congress, but we anticipate that efforts to address the federal budget deficit will continue to place pressures on government healthcare programs. In addition, from time to time, CMS revises the reimbursement systems used to reimburse healthcare providers, including changes to the inpatient hospital MS-DRG system and other payment systems, which may result in reduced Medicare payments. Our business may also be adversely affected by delays or issues implementing reimbursement-related rules and interruptions in the distribution of governmental funds. Changes to government healthcare programs that reduce Medicare reimbursement may also negatively impact payments from commercial payors, since, in some cases, commercial payors rely on all or portions of Medicare payment systems to determine commercial payment rates.
Further, legislation and administrative actions at the federal level may also impact the funding for, or structure of, the Medicaid program, and may shape administration of the Medicaid program at the state level, including in ways that reduce reimbursement. For example, the 2025 Reconciliation Law includes significant healthcare policy reforms that are expected to result in Medicaid spending reductions and changes in administration of state programs. The law makes significant changes to Medicaid financing mechanisms, including restrictions intended to reduce the federal matching funds received by state Medicaid programs, such as limitations on provider tax arrangements and a mandate that HHS revise regulations governing SDP arrangements to cap total payment rates paid by Medicaid managed care organizations for specified services. We are unable to fully assess the ultimate effects of the 2025 Reconciliation Law, as it is a complex law that mandates various changes over time and many details of implementation are not yet clear. In addition to changes at the federal level, some states have enacted or may consider enacting legislation designed to reduce their Medicaid expenditures, including through coverage reductions, changes in patient eligibility requirements and/or enrolling Medicaid beneficiaries in managed care programs. However, as federal healthcare expenditures continue to increase and state governments continue to face budgetary shortfalls, federal and state governments have made, and continue to make, significant changes in the Medicare and Medicaid programs, including reductions in reimbursement levels. Budgetary pressures combined with increased spending demands, including as a result of recent federal actions, are creating additional uncertainty and may result in decreased spending, or decreased spending growth, for Medicaid programs in many states. Further, we may be impacted by developments at the federal and state levels related to Medicaid supplemental payments and SDP arrangements, which could result in our revenues from such arrangements being reduced or eliminated.
Government and commercial payors as well as other third parties from whom we receive payment for our services attempt to control healthcare costs by, for example, requiring hospitals and other providers to discount payments for their services in exchange for exclusive or preferred participation in their benefit plans, reducing coverage of inpatient and emergency room services and shifting care to outpatient settings, implementing site-neutral payment policies to align payment for services across care settings, using utilization review tools including prior authorizations and implementing alternative payment models. In addition, government and commercial payors as well as other third parties from whom we receive payment for our services attempt to control healthcare costs by, for example, requiring hospitals to discount payments for their services in exchange for exclusive or preferred participation in their benefit plans, restricting coverage through utilization review, reducing coverage of inpatient and emergency room services and shifting care to outpatient settings, requiring prior authorizations, and implementing alternative payment models. We are increasingly involved in disputes with payors, as cost control efforts have resulted in an increase in reimbursement denials and delays by governmental and commercial payors, which may increase operational and administrative costs and decrease the reimbursement we receive. Efforts to impose more stringent cost controls are expected to continue and may be enhanced by the increasing consolidation of insurance and managed care companies, vertical integration of health insurers with healthcare providers and regulatory changes. The ability of commercial payors to control healthcare costs using these measures may be enhanced by the increasing consolidation of insurance and managed care companies, vertical integration of health insurers with healthcare providers and regulatory changes. These efforts may reduce our net operating revenues and adversely affect our business and financial condition.
34
Our ability to maintain and obtain favorable contracts with commercial payors significantly affects the revenues and operating results of our facilities. During the year ended December 31, 2025, 65.8% of our net operating revenues came from commercial payors. Commercial payors typically reimburse healthcare providers at a higher rate than Medicare, Medicaid, other government healthcare programs or self-pay patients. Commercial payors continue to demand discounted fee structures, and the trend toward consolidation among private third-party payors tends to increase payor bargaining power. Payors may utilize plan structures such as narrow networks and tiered networks, which may exclude our facilities and employed physicians or favor other providers, and other healthcare providers may negotiate exclusivity provisions or otherwise impact our ability to contract with third-party payors. Price and clinical transparency initiatives and increasing vertical integration efforts involving third-party payors and healthcare providers may also impact our ability to obtain or maintain favorable contract terms. For example, hospitals are required to publish online payor-specific negotiated charges and de-identified minimum and maximum charges. Further, hospitals are required to publish online payor-specific negotiated charges and de-identified minimum and maximum charges. In addition, alignment efforts between third-party payors and healthcare providers and the requirements of the No Surprises Act provide payors with increased access to performance and pricing data, which may increase payor bargaining power.
Our net operating revenues may be reduced if we experience reductions in the volume of patients with private health insurance coverage, which may be driven by factors such as adverse economic conditions, including elevated unemployment and underemployment rates and inflationary pressures, and legislative or regulatory changes that increase barriers to and costs associated with obtaining or maintaining comprehensive coverage. We anticipate that several recent developments may contribute to potential future declines in our volume of patients with private health insurance coverage, including the expiration of the enhanced Affordable Care Act subsidies at the end of 2025, provisions of the 2025 Reconciliation Law that are expected to impact coverage obtained through Affordable Care Act marketplaces, and a final rule issued by CMS in June 2025 focused on health insurance marketplaces and individual market coverage.
Limitations on balance billing may reduce the amount that hospitals and other providers are able to collect for out-of-network services. Limitations on balance billing may also reduce the amount that hospitals and other providers are able to collect for out-of-network services. For example, the No Surprises Act prohibits providers from charging patients an amount beyond the in-network cost sharing amount for services rendered by out-of-network providers, subject to limited exceptions. For services for which balance billing is prohibited (even when no balance billing occurs), the No Surprises Act includes provisions that may limit the amounts received by out-of-network providers by health plans and also establishes an independent dispute resolution process for providers and payors to handle payment disputes that cannot be resolved through direct negotiation. The regulations and related guidance implementing the No Surprises Act, including those establishing the dispute resolution process, are the subject of legal challenges and, potentially, regulatory changes.
If we are unable to negotiate increased reimbursement rates, maintain existing rates or other favorable contract terms, effectively respond to payor cost controls and reimbursement policies or comply with the terms of our payor contracts, or if we experience reductions in the number of patients with private health insurance coverage, the payments we receive for our services may be reduced, which may cause our net operating revenues to decline and could adversely affect our business. If we perform at a level below the outcomes demonstrated by our competitors, are unable to meet or exceed the quality performance standards under any applicable value-based purchasing program, or otherwise fail to effectively provide or coordinate the efficient delivery of quality healthcare services, our reputation in the industry may be negatively impacted, we may receive reduced reimbursement amounts and we may owe repayments to payors, causing our revenues to decline.
Any increase in the volume of self-pay patients or deterioration in the collectability of patient responsibility accounts could adversely affect our financial condition or results of operations. If we experience continued growth in self-pay volume or deterioration in collectability of patient responsibility accounts, our financial condition or results of operations could be adversely affected.
Our primary collection risks relate to uninsured patients and outstanding patient balances for which the primary insurance payor has paid some but not all of the outstanding balance, with the remaining outstanding balance (generally deductibles and co-payments) owed by the patient. Our primary collection risks relate to uninsured patients and outstanding patient balances for which the primary insurance payor has paid some but not all of the outstanding balance, with the remaining outstanding balance (generally deductibles and co-payments) owed by the patient. Collections are impacted by the economic ability of patients to pay and the effectiveness of our collection efforts. Significant changes in payor mix, business office operations, economic conditions or trends in federal and state governmental healthcare coverage may affect our collection of patient accounts receivable and are considered in our estimates of patient accounts receivable collectability. Significant changes in payor mix, business office operations, economic conditions or trends in federal and state governmental healthcare coverage may affect our collection of accounts receivable and are considered in our estimates of accounts receivable collectability.
In recent years, federal and state legislatures have considered or passed various proposals impacting or potentially impacting the size of the uninsured population. For example, federal legislation temporarily enhanced subsidies available for purchasing coverage through Affordable Care Act marketplaces, but these enhanced subsidies expired at the end of 2025. Their expiration is expected to adversely impact health insurance exchange enrollment and significantly increase the uninsured rate. Further, the end of the continuous enrollment requirement established by COVID-19 relief legislation, and the resumption of Medicaid eligibility redeterminations following the expiration of this continuous coverage requirement in 2023, resulted in significant Medicaid coverage disruptions and dis-enrollments of Medicaid enrollees, and overall Medicaid enrollment declined in 2025 in comparison to 2024. The 2025 Reconciliation Law is expected to further adversely affect the uninsured rate, including by requiring pre-enrollment verification of eligibility in a plan with subsidies and restricting subsidized marketplace coverage, effectively ending automatic renewals of coverage, and by limiting Medicare and Medicaid eligibility based on immigration status and other factors, among other measures. Rates of uninsured and underinsured individuals may also be influenced by other legislative and regulatory initiatives related to health insurance, such as permitting the sale of insurance plans that lack currently required consumer protections. Some states impose financial penalties on individuals who fail to maintain health insurance mandates or offer public health insurance options. These
35
variables, among others, make it difficult to predict the number of uninsured individuals and what percentage of our total revenue will be comprised of self-pay revenues.
We may be adversely affected by the growth in patient responsibility accounts as a result of the adoption of plan structures, including high-deductible health plans and health savings accounts, narrow networks and tiered networks, that shift greater responsibility for care to individuals through greater exclusions and copayment and deductible amounts. We may be adversely affected by the growth in patient responsibility accounts as a result of the adoption of plan structures, including health savings accounts, narrow networks and tiered networks, that shift greater responsibility for care to individuals through greater exclusions and copayment and deductible amounts. For example, to address anticipated increases in health insurance premiums for consumers, CMS announced in September 2025 that it would expand eligibility for high-deductible catastrophic health insurance plans. Our ability to collect patient responsibility accounts may be limited by statutory, regulatory and investigatory initiatives, including private lawsuits directed at hospital charges and collection practices for uninsured and underinsured patients and regulatory restrictions on charges for out-of-network services. Further, our ability to collect patient responsibility accounts may be limited by statutory, regulatory and investigatory initiatives, including private lawsuits directed at hospital charges and collection practices for uninsured and underinsured patients and regulatory restrictions on charges for out-of-network services. For example, the No Surprises Act requires providers to send uninsured and self-pay patients a good faith estimate of expected charges for items and services. The estimate must be provided in advance of the scheduled date for the item or service or upon request and cover items and services that are reasonably expected to be provided together with the primary item or services, including those that may be provided by other providers. If the uninsured or self-pay patient receives a bill that is substantially greater than the expected charges in the good faith estimate, they may initiate a patient-provider dispute resolution process established by regulation. If the uninsured or self-pay patient receives a bill that is substantially greater than the expected charges in the good faith estimate or the provider furnishes an item or service that was not included in the good faith estimate, they may initiate a patient-provider dispute resolution process established by regulation. In addition, a deterioration of economic conditions in the United States could potentially lead to higher levels of uninsured patients, result in higher levels of patients covered by lower paying government programs, result in fiscal uncertainties for both government payors and private insurers and/or limit the economic ability of patients to make payments for which they are responsible. Any increase in the volume of self-pay patients or deterioration in collectability of patient responsibility accounts could adversely affect our financial condition or results of operations. If we experience continued growth in self-pay volume or deterioration in collectability of patient responsibility accounts, our financial condition or results of operations could be adversely affected.
Some of the non-urban communities in which we operate face challenging economic conditions, and the failure of certain employers, or the closure of certain manufacturing and other facilities in our markets, could have a disproportionate impact on our hospitals.
Some of the non-urban communities in which we operate have been facing particularly challenging economic conditions, or may face such conditions in the future. In particular, the economies in the non-urban communities in which our hospitals primarily operate are often dependent on a small number of large employers, especially manufacturing or similar facilities. In addition, the economies in the non-urban communities in which our hospitals primarily operate are often dependent on a small number of large employers, especially manufacturing or similar facilities. These employers often provide income and health insurance for a disproportionately large number of community residents who may depend on our hospitals for care. The failure of one or more large employers, or the closure or substantial reduction in the number of individuals employed at manufacturing or other facilities located in or near many of the non-urban communities in which our hospitals primarily operate, could cause affected employees to move elsewhere for employment or lose insurance coverage that was otherwise available to them. When patients are experiencing personal financial difficulties or have concerns about general economic conditions, they may delay or forgo elective procedures, choose to seek care in emergency rooms and purchase high-deductible insurance plans or no insurance at all, which increases a hospital’s dependence on self-pay revenue and may adversely affect our results of operations.
The demand for services provided by our hospitals and affiliated providers can be impacted by factors beyond our control. 32 The demand for services provided by our hospitals and affiliated providers can be impacted by factors beyond our control.
Our admissions and adjusted admissions as well as volume, case-mix and acuity trends may be impacted by factors beyond our control. Our admissions and adjusted admissions as well as acuity trends may be impacted by factors beyond our control. For example, seasonal fluctuations in the severity of influenza and other illnesses, unplanned shutdowns or unavailability of our facilities due to weather or other unforeseen events, decreases in trends in high-acuity service offerings, changes in competition from other service providers, turnover in physicians affiliated with our hospitals, governmental restrictions on the provision of medical care and changes in medical practices, treatment regimens and medical technology can have an impact on the demand for services at our hospitals and affiliated providers. For example, seasonal fluctuations in the severity of influenza and other critical illnesses, such as COVID-19, unplanned shutdowns or unavailability of our facilities due to weather or other unforeseen events, decreases in trends in high acuity service offerings, changes in competition from other service providers, turnover in physicians affiliated with our hospitals, or changes in medical technology can have an impact on the demand for services at our hospitals and affiliated providers.
In addition, trends in physician treatment protocols and health plan design, such as health plans that shift greater financial responsibility to patients, could result in shifts to lower intensity and lower cost treatment methodologies or in patients seeking care from other providers. Efforts to shift treatment to lower-acuity settings, such as the elimination of Medicare’s inpatient-only list over a three year period beginning in 2026, and the expansion of in-home acute care models may reduce inpatient volumes and may result in patients seeking care from other providers.
In addition, certain of our facilities are located in hurricane-prone coastal regions in Florida and other states, and our operations from time to time have been adversely impacted by, and may continue to be adversely impacted by, severe weather conditions, such as hurricanes, tornadoes, floods, and winter storms. For example, certain of our facilities in Florida, Georgia and Tennessee experienced an interruption in their business and incurred additional costs as a direct result of Hurricane Helene, which made landfall in late September 2024 and Hurricane Milton, which made landfall in early October 2024, and a hospital in Florida which was sold by us in 2025 had indefinitely suspended inpatient operations due to the effects of Hurricanes Helene and Milton prior to the completion of such sale. We also could be affected by weather-related events or other environmental issues to the extent such issues adversely affect the general economy or specific markets, adversely impact our supply chain or increase the costs of supplies needed for our operations or otherwise result in disruptions impacting the communities in which our facilities are located. Moreover, we could be affected by climate change and other environmental issues to the extent such issues adversely affect the general economy or specific markets, adversely impact our supply chain or increase the costs of supplies needed for our operations, or otherwise result in disruptions impacting the communities in which our facilities are located.
36
The impact of these or other factors beyond our control could have an adverse effect on our business, financial position and results of operations.
The emergence and effects related to a future pandemic, epidemic, outbreak of an infectious disease or other public health crisis could adversely impact our business and operations.
As a provider of healthcare services, we are subject to the health, economic and other effects of public health conditions. For example, we were significantly impacted by the public health and economic effects of the COVID-19 pandemic. If a future pandemic, epidemic, outbreak of an infectious disease or other public health crisis were to occur in a market in which we operate or otherwise affects our markets, our business and operations could be adversely affected. Any such crisis could diminish the public trust in healthcare facilities, especially hospitals that fail to accurately or timely diagnose, or that are treating (or have treated) patients affected by, contagious diseases. If any of our facilities are involved, or perceived as being involved, in treating patients for such a contagious disease, other patients might cancel elective procedures or fail to seek needed care at our facilities. Patient volumes may decline or volumes of uninsured and underinsured patients may increase, depending on the economic circumstances surrounding the pandemic, epidemic, or outbreak. Further, a pandemic, epidemic, or outbreak might adversely impact our business by causing a temporary shutdown or diversion of patients, by causing disruption or delays in supply chains for materials and products or by causing staffing shortages in our facilities. Although we have contingency plans in place, including infection control and disaster plans, the potential impact of, as well as the public’s and government’s response to, any such future pandemic, epidemic or outbreak of an infectious disease with respect to our markets or our facilities is difficult to predict and could adversely impact our business and operations.
The industry trend towards value-based purchasing may negatively impact our business. The industry trend towards value-based purchasing may negatively impact our business.
There is a trend toward value-based purchasing of healthcare services across the healthcare industry among both government and commercial payors. There is a trend toward value-based purchasing of healthcare services across the healthcare industry among both government and commercial payors. Generally, value-based purchasing initiatives tie payment to the quality and efficiency of care. For example, hospital payments may be negatively impacted by the occurrence of HACs. Medicare does not reimburse for care related to HACs, by disallowing the hospital to be assigned a higher paying MS-DRG if certain HACs were not present on admission and the identified HAC is the only condition resulting in the assignment of the higher paying MS-DRG. Hospitals in the bottom quartile of HAC rates receive a 1% reduction in their total Medicare payments the following year. In addition, federal funds may not be used under the Medicaid program to reimburse providers for services provided to treat HACs. Hospitals that experience excess readmissions for designated conditions receive reduced payments for all inpatient discharges in the fiscal year. HHS also reduces Medicare inpatient hospital payments for all discharges by a required percentage and pools the amount collected from these reductions to fund payments to reward hospitals that meet or exceed certain quality performance standards. Further, Medicare requires hospitals and other providers to report certain quality data to receive full reimbursement updates. Further, Medicare and Medicaid require hospitals to report certain quality data to receive full reimbursement updates.
HHS continues to focus on tying Medicare payments to quality or value through alternative payment models, which generally aim to make providers more attentive to the quality and cost of care they deliver to patients. 33 HHS continues to focus on tying Medicare payments to quality or value through alternative payment models, which generally aim to make providers attentive to the quality and cost of care they deliver to patients. Examples of alternative payment models include ACOs and bundled payment arrangements. An ACO is a care coordination model intended to produce savings as a result of improved quality and operational efficiency. In bundled payment models, providers accept accountability for costs and quality of care by receiving one payment for services provided to patients for certain medical conditions or episodes of care. In bundled payment models, providers receive one payment for services provided to patients for certain medical conditions or episodes of care, accepting accountability for costs and quality of care. Providers may receive supplemental Medicare payments or owe repayments to CMS depending on whether spending exceeds or falls below a specified spending target and whether certain quality standards are met. Generally, participation in Medicare bundled payment programs is voluntary, but some models are mandatory. For example, beginning January 2026, CMS requires hospitals in selected markets to participate in TEAM, a new model focused on five specified surgical procedure episodes. CMS continues to support the transition from Medicare fee-for-service models to value-based payment and care delivery models and to promote alternative payment models that involve downside risk or that shift some financial risk from conveners to providers.
There are also several state-driven value-based care initiatives. There are also several state-driven value-based care initiatives. For example, some states have aligned quality metrics across payors through legislation or regulation. CMS has signaled its intent to support value-based initiatives in the Medicaid context, such as through its May 2024 final rule revising SDP arrangement requirements, which reduced state burdens to help states use these arrangements to implement value-based initiatives. However, the 2025 Reconciliation Law’s limitations on SDP arrangements may affect states’ ability to continue or increase Medicaid value-based initiatives. Commercial payors are also transitioning toward value-based reimbursement arrangements. Commercial payors are transitioning toward value-based reimbursement arrangements as well. For example, many commercial payors require hospitals to report quality data and restrict reimbursement for certain preventable adverse events. Further, many commercial payors require hospitals to report quality data and restrict reimbursement for certain preventable adverse events.
We expect value-based purchasing programs, including programs that condition reimbursement on patient outcome measures or involve downside risk, to become more common and to involve a higher percentage of reimbursement amounts. We expect value-based purchasing programs, including programs that condition reimbursement on patient outcome measures, to become more common and to involve a higher percentage of reimbursement amounts. It may be difficult to predict the nature of these programs, the administrative burden involved, and their effects on our operations. It is unclear whether these and other alternative payment models will successfully coordinate care and reduce costs and whether they will decrease aggregate reimbursement. While we believe we are adapting our business strategies to compete in a value-based reimbursement
37
environment, we are unable at this time to predict how this trend will affect our results of operations. If we perform at a level below the outcomes demonstrated by our competitors, are unable to meet or exceed the quality performance standards under any applicable value-based purchasing program or otherwise fail to effectively provide or coordinate the efficient delivery of quality healthcare services, our reputation in the industry may be negatively impacted, we may receive reduced reimbursement amounts and we may owe repayments to payors, causing our net operating revenues to decline. If we perform at a level below the outcomes demonstrated by our competitors, are unable to meet or exceed the quality performance standards under any applicable value-based purchasing program, or otherwise fail to effectively provide or coordinate the efficient delivery of quality healthcare services, our reputation in the industry may be negatively impacted, we may receive reduced reimbursement amounts and we may owe repayments to payors, causing our revenues to decline.
Our revenues are somewhat concentrated in a relatively small number of states, which makes us particularly sensitive to regulatory and economic changes in those states. Our revenues are somewhat concentrated in a relatively small number of states, which makes us particularly sensitive to regulatory and economic changes in those states.
Our revenues are particularly sensitive to regulatory and economic changes in states in which we generate a significant portion of our revenues, including Indiana, Alabama, Texas, Florida and Tennessee. Accordingly, any change in the current demographic, economic, competitive, or regulatory conditions in these states could have an adverse effect on our business, financial condition, or results of operations. In particular, changes to Medicaid and other payment programs in these states, including modifications, expiration or termination of Medicaid waiver programs or supplemental payment programs, could also have an adverse effect on our business, financial condition, results of operations, or cash flows. For example, a Medicaid waiver in Texas provides the federal authority for operations of most of the state’s Medicaid managed care programs and provides funding for uncompensated care. Although CMS has approved the Texas waiver program through 2030, various payment programs operated under the waiver, such as SDP programs, have more limited approval periods. The 2025 Reconciliation Law includes limitations on SDP arrangements, directing HHS to revise SDP regulations to tie caps on total payment rates paid by Medicaid managed care organizations for specified services, including hospital services, to Medicare payment rates instead of average commercial rates. Several states in which we operate, including Texas, currently tie caps on total payment rates paid by managed care organizations to average commercial rates. If SDP programs or similar programs in which we participate are modified or not extended or CMS does not continue to approve these programs, our net operating revenues could be negatively impacted.
Risks Related to Human Capital
Our performance depends on our ability to recruit and retain quality physicians.
The success of our healthcare facilities depends in part on the number and quality of the physicians on the medical staffs of our healthcare facilities, our ability to employ quality physicians, the admitting and utilization practices of employed and independent physicians, maintaining good relations with those physicians and controlling costs related to the employment of physicians. The success of our healthcare facilities depends in part on the number and quality of the physicians on the medical staffs of our healthcare facilities, our ability to employ quality physicians, the admitting and utilization practices of employed and independent physicians, maintaining good relations with those physicians and controlling costs related to the employment of physicians. Although we employ some physicians, physicians are often not employees at our healthcare facilities at which they practice. In many of the markets we serve, many physicians have admitting privileges at other healthcare facilities in addition to our healthcare facilities. Such physicians may terminate their affiliation with or employment by our healthcare facilities at any time. Moreover, we are facing increased competition from health insurers and private equity-backed companies seeking to acquire or affiliate with physicians or physician practices.
We may face increased challenges recruiting and retaining quality physicians as the physician population reaches retirement age, if there is a shortage of physicians willing and able to provide comparable services. 34 We may face increased challenges recruiting and retaining quality physicians as the physician population reaches retirement age, especially if there is a shortage of physicians willing and able to provide comparable services. Moreover, changes in immigration or visa policies could reduce the availability of international medical graduates. In some markets, physician recruitment and retention may be affected by a shortage of physicians in certain specialties, difficulties in obtaining professional liability insurance and state law restrictions on the provision of medical care, including reproductive health services. In some markets, physician recruitment and retention may be affected by a shortage of physicians in certain specialties or the difficulties physicians may experience in obtaining professional liability insurance. Shortages of physicians, particularly within emergency medicine, radiology, and anesthesiology, may adversely affect hospital operations. The types, amount and duration of compensation and assistance we can provide when recruiting physicians are limited by the federal Physician Self-Referral Law (commonly known as the Stark Law), the federal Anti-Kickback Statute and similar state restrictions. If we are unable to provide adequate support personnel or technologically advanced equipment and facilities that meet the needs of those physicians and their patients, our ability to recruit and retain quality physicians may be negatively impacted. Challenges recruiting and retaining physicians may affect our admissions and capacity and may otherwise adversely impact our business.
Our performance and labor costs have been, and may continue to be, adversely affected by challenging labor market conditions and the shortage of qualified nurses and other healthcare personnel. Our performance and labor costs have been, and may continue to be, adversely affected by challenging labor market conditions and the shortage of qualified nurses and other healthcare personnel.
The operations of our healthcare facilities depend on the efforts, abilities and experience of our facility management, healthcare professionals, such as nurses, pharmacists, lab technicians, and medical support personnel. The operations of our healthcare facilities are dependent on the efforts, abilities and experience of our facility management, healthcare professionals, such as nurses, pharmacists, lab technicians, and medical support personnel. We compete with other healthcare providers in recruiting and retaining qualified facility management and personnel responsible for the daily operations of our healthcare facilities, including nurses, other non-physician healthcare professionals and medical support personnel.
The healthcare industry has been experiencing challenging labor market conditions. Our hospitals and other healthcare facilities, like many other healthcare providers, have experienced, and may continue to experience, increased labor costs due to labor shortages, public health conditions, inflationary conditions, workforce burnout and other factors. The healthcare industry has been experiencing a challenging labor market arising out of current macroeconomic conditions, and our hospitals and other healthcare facilities, like many other healthcare providers, have experienced increased labor costs. New limitations on federal loan eligibility and
38
other student loan changes imposed pursuant to the 2025 Reconciliation Law may also impact healthcare personnel shortages. We may also be required to continue to enhance wages and benefits to recruit and retain nurses, other healthcare professionals and medical support personnel, and/or to hire more expensive temporary or contract personnel. We may be required to continue to enhance wages and benefits to recruit and retain nurses, other healthcare professionals and medical support personnel, and/or to hire more expensive temporary or contract personnel. In addition, in some markets in which we operate, a shortage of available nurses, other healthcare professionals and medical support personnel has been an operating issue. To the extent we are unable to maintain sufficient staffing levels at our hospitals, we may be required to limit the acute healthcare services provided at certain of our hospitals, which would have a corresponding adverse effect on our net operating revenues. In addition, to the extent we are unable to maintain sufficient staffing levels at our hospitals, we may be required to limit the acute healthcare services provided at certain of our hospitals, which would have a corresponding adverse effect on our net revenues. We also depend on the available labor pool of semi-skilled and unskilled employees in each of the markets in which we operate and the available labor pool may not be sufficient for our demands. We also depend on the available labor pool of semi-skilled and unskilled employees in each of the markets in which we operate. In some of our markets, employers across various industries have increased their wages for these roles, which has created more competition for this sector of employees. The impact of labor shortages across the healthcare industry may result in other healthcare facilities, such as nursing homes, limiting admissions, which may constrain our ability to discharge patients to such facilities and further exacerbate the demand on our resources.
In addition, federal and state laws and regulations may increase our costs of maintaining qualified nurses and other medical support personnel. The federal government or the states in which we operate could adopt mandatory nurse-staffing ratios or related measures aimed at regulating staffing or could revise state-level mandatory nurse-staffing ratios or related measures already in place. Any of these measures could significantly affect labor costs and could have an adverse impact on our net operating revenues if we are required to limit admissions, hire additional personnel or incur other costs in order to comply with such requirements.
We may be unable to attract, hire, and retain a highly qualified and diverse workforce, including senior management personnel and key employees.
Much of our future success depends on the continued availability and service of senior management personnel. The loss or failure to engage in adequate succession planning of any of our executive officers or other key senior management personnel could harm our business and/or our prospects. In addition, changes in our leadership, including the changes to the Company’s senior leadership team which occurred during 2025, can be inherently difficult to manage, and if we are unable to implement such changes effectively, our financial results may be adversely impacted.
At December 31, 2025, certain employees at three of our hospitals were represented by various labor unions. While we have not experienced work stoppages to date that have material and adversely affected our business or results of operations, increased or ongoing labor union activity could adversely affect our labor costs or otherwise adversely impact us. In addition, when negotiating collective bargaining agreements with unions, whether such agreements are renewals or first contracts, there is the possibility that strikes could occur during the negotiation process, and our continued operation during any strikes could increase our labor costs and otherwise adversely impact us. Finally, potential changes to federal labor laws and regulations, could increase the likelihood of employee unionization activity and the ability of employees to unionize, which could adversely impact our operations and financial results. Finally, potential changes to federal labor laws and regulations, including those supported by the current presidential administration, could increase the likelihood of employee unionization activity and the ability of employees to unionize, which could adversely impact our operations and financial results.
If our labor costs continue to increase, we may not be able to raise rates to offset these increased costs. If our labor costs continue to increase, we may not be able to raise rates to offset these increased costs. We depend on the ability of these senior management team members and key employees to successfully manage our operations, and on our ability to attract and retain skilled employees. Because a significant percentage of our revenues consists of fixed, prospective payments, our ability to pass along increased labor costs to patients is constrained. In the event we are not entirely effective at recruiting and retaining qualified facility management, nurses and other medical support personnel, or in controlling labor costs, this could continue to have an adverse effect on our results of operations.
We may be adversely impacted by the inability of third parties with whom we contract to provide hospital-based physicians as the result of industry-wide disruptions in the market for outsourced medical specialists.
The success of our hospitals depends in part on the adequacy of staffing, including through contracts with third parties. The success of our hospitals depends in part on the adequacy of staffing, including through contracts with third parties. We contract with various third parties who provide hospital-based physicians in a number of specialties, including emergency, anesthesiology, hospitalist/inpatient care, radiology, tele-radiology and surgery. We contract with various third parties who provide hospital-based physicians, including emergency, anesthesiology, hospitalist/inpatient care, radiology, tele-radiology and surgery. Third-party providers of hospital-based physicians, including those with whom we contract, have experienced significant disruption in the form of policy changes, including those stemming from enactment of the No Surprises Act, challenging labor market conditions resulting from a shortage of physicians and inflationary wage-related pressures, as well as increased competition through consolidation of physician groups. Third-party providers of hospital-based physicians, including those with whom we contract, have experienced significant disruption in the form of regulatory changes, including those stemming from enactment of the No Surprises Act, challenging labor market conditions resulting from a shortage of physicians and inflationary wage-related pressures, as well as increased competition through consolidation of physician groups. In some instances, providers of outsourced medical specialists have become insolvent and unable to fulfill their contracts with us for providing hospital-based physicians. Our efforts to mitigate the potential impact to our business from third-party providers who are unable to fulfill their contracts to provide hospital-based physicians, including through acquisitions of outsourced medical specialist businesses, employment of physicians and re-negotiation or assumption of existing contracts, may be unsuccessful. Further, our efforts to mitigate the potential impact to our business from third-party providers who are unable to fulfill their contracts to provide hospital-based physicians, including through acquisitions of outsourced medical specialist businesses, employment of physicians and re-negotiation or assumption of existing contracts, may be unsuccessful. If we are unable to adequately contract with providers, or effectively respond to and mitigate the potential impact of third-party providers not fulfilling their contracts, our admissions may decrease, and our operating performance, capacity and growth prospects may be adversely affected, which may adversely impact our business and financial results.
39
Risks Related to Legal Proceedings
We are the subject of various legal, regulatory and governmental proceedings that, if resolved unfavorably, could have an adverse effect on us, and we may be subject to other loss contingencies, both known and unknown.
We are a party to various legal, regulatory and governmental proceedings and other related matters, including government investigations. In addition, we are and may become subject to other loss contingencies, both known and unknown, which may relate to past, present and future facts, events, circumstances and occurrences. Should an unfavorable outcome occur in connection with our current or potential future legal, regulatory or governmental proceedings or other loss contingencies, or if we become subject to any such loss contingencies in the future, there could be an adverse impact on our financial position, results of operations and liquidity.
In particular, government investigations, as well as qui tam lawsuits, may lead to significant fines, penalties, damages payments or other sanctions, including exclusion from government healthcare programs. Settlements of lawsuits involving Medicare and Medicaid issues routinely require both monetary payments and corporate integrity agreements, each of which could have an adverse effect on our business, financial condition, results of operations and/or cash flows. For a further discussion of certain legal matters, see “Legal Proceedings” in Part I, Item 3 of this Form 10-K. For a further discussion of these matters, see “Legal Proceedings” in Part I, Item 3 of this Form 10-K.
We could be subject to substantial uninsured liabilities or increased insurance costs as a result of significant legal actions. We could be subject to substantial uninsured liabilities or increased insurance costs as a result of significant legal actions.
Physicians, hospitals and other healthcare providers have become subject to an increasing number of legal actions alleging professional liability, product liability or related legal theories. Physicians, hospitals and other healthcare providers have become subject to an increasing number of legal actions alleging professional liability, product liability, or related legal theories. Even in states that have imposed caps on damages, litigants are seeking recoveries under new theories of liability that might not be subject to the caps on damages. Many of these actions involve large claims and significant defense costs. To protect us from the cost of these claims, we maintain claims-made professional liability insurance and general liability insurance coverage in excess of those amounts for which we are self-insured. This insurance coverage is in amounts that we believe to be sufficient for our operations; however, our insurance coverage may not continue to be available at a reasonable cost for us to maintain adequate levels of insurance. Additionally, our insurance coverage does not cover all claims against us, such as fines, penalties, or other damage and legal expense payments resulting from qui tam lawsuits. We cannot predict the outcome of current or future legal actions against us or the effect that judgments or settlements in such matters may have on us or on our insurance costs. Additionally, all professional and general liability insurance we purchase is subject to policy limitations. If the aggregate limit of any of our professional and general liability policies is exhausted, in whole or in part, it could deplete or reduce the limits available to pay any other material claims applicable to that policy period. Furthermore, one or more of our insurance carriers could become insolvent and unable to fulfill its or their obligations to defend, pay or reimburse us when those obligations become due. In that case, or if payments of claims exceed our estimates or are not covered by our insurance, it could have an adverse effect on our business, financial condition or results of operations.
Risks Related to Government Regulation
Our business may be adversely impacted by changes and uncertainty in the healthcare industry, including healthcare public policy developments and other changes to laws and regulations.
The healthcare industry is subject to changing political, regulatory and other influences and is heavily regulated. Federal agencies oversee, regulate and otherwise affect many aspects of our business, including through Medicare and Medicaid policies, policies affecting the size of the uninsured population and enforcement and interpretation of fraud and abuse laws. The outcome of the 2024 federal elections, including Republican control of both the executive and legislative branches, has increased regulatory uncertainty and the potential for significant policy changes. President Trump has issued several executive orders that impact or may impact the healthcare industry, including orders focused on price transparency and tariffs, and a presidential advisory commission established by executive order was tasked with restructuring government agencies and eliminating government expenditures, although this commission disbanded in mid-2025. Other actions by the presidential administration have resulted in holds on or cancellations of congressionally authorized spending as well as interruptions in the distribution of government funds. In addition, the presidential administration has significant influence on healthcare policy changes through government agency regulation. In March 2025, HHS announced a significant agency restructuring intended to reduce the HHS workforce and consolidate divisions of the agency. Changes in agency structures and staffing, such as reduction or elimination of personnel and agencies, may result in changes to established rulemaking conventions and timelines, including for regularly issued reimbursement rules, among other effects on agency operations. HHS also announced a change in its policy in public participation in rulemaking that may negatively affect the ability of industry participants to receive advance notice of and offer feedback on some policy changes. Regulatory uncertainty has also increased as a result of recent decisions issued by the U.S. Supreme Court that affect review of federal agency actions. These decisions increase judicial scrutiny of agency authority, shift greater responsibility for statutory interpretation to courts, expand the time period during which a plaintiff can sue regulators and may result in inconsistent judicial interpretations and delays in agency rulemaking processes. These decisions may increase legal challenges to healthcare regulations and agency guidance and decisions, including those issued by
40
HHS and its agencies, including CMS, the FDA, and the OIG. Impacts of the recent Supreme Court decisions could require us to make changes to our operations and have a material negative impact on our business.
The healthcare industry has been and continues to be impacted by healthcare reform efforts. Many recent reform initiatives have focused on reducing government spending and increasing or, more recently, decreasing access to health insurance. For example, the Affordable Care Act expanded health insurance coverage through a combination of public program expansion and private sector health insurance reforms. Changes in the law’s implementation, subsequent legislation and regulations, state initiatives and other factors have and may continue to affect the number of individuals that elect to obtain public or private health insurance or the scope of such coverage, if obtained, and may impact our payor mix. For example, federal legislation temporarily enhanced subsidies available for purchasing coverage through Affordable Care Act marketplaces by lowering premiums and raising income eligibility thresholds, but these enhanced subsidies expired at the end of 2025. Their expiration may adversely impact enrollment through the Affordable Care Act marketplaces and significantly raise the uninsured rate. Other legislative and executive branch initiatives related to health insurance could also result in increased prices for consumers purchasing health insurance coverage or may permit the sale of insurance plans that do not satisfy current Affordable Care Act consumer protections, which could increase rates of uninsured and underinsured
individuals and destabilize insurance markets. Reductions in the number of insured individuals or the scope of insurance coverage, or an increase in patients covered under governmental health programs or other health plans with lower reimbursement levels, may have an adverse effect on our business.
In addition, the Medicare and Medicaid programs are subject to change, including as a result of legislation and administrative actions. For example, some members of Congress have proposed measures intended to accelerate the shift from traditional Medicare to Medicare Advantage. For example, some members of Congress have proposed measures that would expand government-funded coverage. Legislation and administrative actions at the federal level may also impact funding for, or the structure of, the Medicaid program and may shape administration of the Medicaid program at the state level. For example, the 2025 Reconciliation Law includes significant health care policy reforms that are expected to result in Medicaid spending reductions and changes in administration of state Medicaid programs. The law limits eligibility for Medicaid by imposing work or community engagement requirements for adults under age 65 in Medicaid expansion states, including states with waiver-based expansions, subject to limited exceptions. The law also makes significant changes to Medicaid financing mechanisms, including restrictions intended to reduce the federal matching funds received by state Medicaid programs, with greater restrictions in states that have expanded Medicaid. It is difficult to predict the ultimate effects of the 2025 Reconciliation Law, as it is a complex law that mandates various changes over time, and we expect additional rulemaking and guidance from federal agencies regarding implementation. However, reductions in federal matching funds and increased state obligations and administrative burden could result in state limitations on Medicaid eligibility or coverage, among other effects, particularly if states are unable to offset reductions in federal funding. Some states have trigger laws that would end their Medicaid expansion or require other changes if the federal funding match rate is reduced or similar funding restrictions are imposed for Medicaid expansion. Although most of these trigger laws are not directly implicated by the 2025 Reconciliation Law, some states may nonetheless consider or make changes to Medicaid expansion programs due to related budgetary pressures. CMS may make changes to Medicaid payment models and may impose new restrictions or grant states additional flexibility in the administration of state Medicaid programs.
Other recent health reform initiatives and proposals at the federal and state levels include those focused on price transparency and out-of-network charges, which may impact prices, our competitive position, patient volumes and the relationships between hospitals, patients, payors, and ancillary providers (such as anesthesiologists, radiologists, and pathologists), and site-neutral payment policies, which may reduce the reimbursement we receive. Some states are considering or have imposed rate-setting measures, including limits on hospital rates. Other industry participants, such as private payors and large employer groups and their affiliates, may also introduce financial or delivery system reforms.
There is uncertainty regarding whether, when, and what other public policy initiatives will be adopted through governmental avenues and/or the private sector, the timing and implementation of any such efforts, and the impact of those efforts on providers as well as other healthcare industry participants. There is also uncertainty regarding whether, when, and what other health reform measures will be adopted through governmental avenues and/or the private sector, the timing and implementation of any such efforts, and the impact of those efforts on providers as well as other healthcare industry participants. It is difficult to predict the nature and/or success of current and future public policy changes, any of which may have an adverse impact on our business. It is difficult to predict the nature and/or success of current and future health reform initiatives, any of which may have an adverse impact on our business.
If we fail to comply with extensive laws and government regulations, including fraud and abuse laws, we could suffer penalties or be required to make significant changes to our operations. If we fail to comply with extensive laws and government regulations, including fraud and abuse laws, we could suffer penalties or be required to make significant changes to our operations.
The healthcare industry is governed by extensive and complex laws and regulations at the federal, state and local government levels. The healthcare industry is governed by extensive and complex laws and regulations at the federal, state and local government levels. These laws and regulations include requirements related to licensure, certification, and enrollment with government programs; the necessity and adequacy of medical care; quality of medical equipment and services; qualifications and supervision of medical and support personnel; the provision of services via telehealth; operating policies and procedures; screening, stabilization and transfer of individuals who have emergency medical conditions; restrictions on the provision of medical care, including with respect to reproductive care; distribution, maintenance and dispensing of pharmaceuticals and controlled substances; billing and coding for services; proper handling of overpayments; classification of levels of care provided; preparing and filing cost reports; relationships with referral sources and referral recipients; maintenance of adequate records; hospital use; rate-setting; building codes; environmental
41
protection; patient, workforce and public safety; privacy and security; interoperability and refraining from information blocking; development and use of AI/ML and other predictive algorithms; debt collection; limits or prohibitions on balance billing and billing for out-of-network services; and communications with patients and consumers. Examples of these laws include HIPAA, the Stark Law, the federal Anti-Kickback Statute, the federal False Claims Act, the EMTALA and similar state laws. Examples of these laws include, but are not limited to, HIPAA, the Stark Law, the federal Anti-Kickback Statute, the federal False Claims Act, the EMTALA and similar state laws.
There are heightened coordinated civil and criminal enforcement efforts by both federal and state government agencies relating to the healthcare industry, including the hospital segment. 37 There are heightened coordinated civil and criminal enforcement efforts by both federal and state government agencies relating to the healthcare industry, including the hospital segment. Enforcement actions have focused on financial arrangements between hospitals and physicians, billing for services without adequately documenting medical necessity and billing for services outside the coverage guidelines for such services. Specific to our hospitals, we have received inquiries and subpoenas from various governmental agencies regarding these and other matters, and we are also subject to various claims and lawsuits relating to such matters. For a further discussion of these matters, see “Legal Proceedings” in Part I, Item 3 of this Form 10-K.
If we fail to comply with applicable laws and regulations, which are subject to change, we could be subject to liabilities, including civil penalties, civil lawsuits and related damages, the loss of our licenses to operate one or more facilities, exclusion of one or more facilities from participation in the Medicare, Medicaid and other federal and state healthcare programs, and criminal penalties. The costs of compliance with, and the other burdens imposed by, these and other laws or regulatory actions may increase our operational costs, result in interruptions or delays in the availability of systems and/or result in a patient volume decline. We may also face audits or investigations by government agencies relating to our compliance with applicable laws and regulations. An adverse outcome under any such investigation or audit could result in liability, result in adverse publicity and adversely affect our business. Evolving interpretations or enforcement of applicable laws or regulations could subject our current practices to allegations of impropriety or illegality or could require us to make changes in our facilities or operations. In the future, evolving interpretations or enforcement of applicable laws or regulations could subject our current practices to allegations of impropriety or illegality or could require us to make changes in our facilities or operations. In addition, other legislation or regulations may be adopted that could adversely affect our business.
Actual or perceived failures to comply with legal requirements regarding the privacy and security of health information or other regulated, sensitive or confidential information, or legal requirements regarding data privacy or data protection, could adversely affect our business, results of operations and financial condition.
The data protection landscape is rapidly evolving. We are subject to numerous state and federal laws, requirements and regulations governing the collection, use, storage, processing, disclosure, retention, privacy and security of health-related and other regulated, sensitive or confidential information and may become subject to additional legal requirements of this nature in the future. The data protection landscape is rapidly evolving, and we are subject to numerous state and federal laws, requirements and regulations governing the collection, use, storage, processing, disclosure, retention, privacy and security of health-related and other regulated, sensitive or confidential information, and may become subject to additional legal requirements of this nature in the future. For example, the Health Insurance Portability and Accountability Act of 1996, the Health Information Technology for Economic and Clinical Health Act of 2009, each as amended, and the privacy and security regulations that implement these laws (collectively, “HIPAA”) establish national privacy and security standards for the protection of protected health information, or PHI, by health plans, healthcare clearinghouses and certain healthcare providers, referred to as covered entities, and the business associates with whom such covered entities contract for services. HIPAA regulates permissible uses and disclosures of PHI, establishes individual rights related to PHI, including the right to access PHI, and requires covered entities and business associates to adopt administrative, physical and technical safeguards to protect such information. Covered entities must notify affected individuals without unreasonable delay of breaches of unsecured PHI, the HHS Office for Civil Rights, or OCR, which enforces HIPAA, and, in the case of larger breaches, the media. Failure to comply with the HIPAA privacy and security standards can result in civil monetary penalties, resolution agreements, monitoring agreements, and criminal penalties including fines and/or imprisonment. Failure to comply with the HIPAA privacy and security standards can result in civil monetary penalties, resolution agreements, monitoring agreements, and, in certain circumstances, criminal penalties including fines and/or imprisonment. A covered entity may be subject to penalties as a result of a business associate violating HIPAA. In addition, state attorneys general may enforce the HIPAA privacy and security regulations in response to violations that threaten the privacy of state residents. Although HIPAA does not create a private right of action allowing individuals to sue in civil court for violations, the laws and regulations have been used as the basis for duty of care in state civil suits such as those for negligence or recklessness in the misuse or breach of PHI.
There are numerous other laws and legislative and regulatory initiatives at the federal and state levels governing the confidentiality, privacy, availability, integrity and security of PHI and other types of personal information. There are numerous other laws and legislative and regulatory initiatives at the federal and state levels governing the confidentiality, privacy, availability, integrity and security of PHI and other types of personal information. Certain state laws may be more stringent, broader in scope or offer greater individual rights with respect to PHI than HIPAA, state laws may differ from each other, and the interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, all of which may complicate compliance efforts. Where state laws are more protective than HIPAA or apply more broadly, we have to comply with their stricter provisions. Not only do some of these state laws impose fines and other penalties upon violators, but some may afford private rights of action to individuals who believe their personal information has been misused. We may not remain in compliance with diverse privacy and security requirements in all of the jurisdictions in which we do business, particularly to the extent they are inconsistent, rapidly changing and/or ambiguous and uncertain as to their applicability to our business practices.
In addition, we are subject to consumer protection laws and regulations in connection with our business activities. For example, the FTC uses its consumer protection authority to initiate enforcement actions in response to data breaches. Failing to take appropriate steps to keep consumers’ personal information secure may violate the Federal Trade Commission Act. For information that is not subject to HIPAA and deemed to be “personal health records,” the FTC may also impose penalties for violations of the Health Breach
42
Notification Rule, or HBNR, to the extent we are considered a “personal health record-related entity” or “third party service provider.” The FTC has taken several enforcement actions under HBNR and indicated that the FTC will continue to protect consumer privacy through greater use of the agency’s enforcement authorities.” The FTC has recently taken several enforcement actions under HBNR and indicated that the FTC will continue to protect consumer privacy through greater use of the agency’s enforcement authorities. As a result, we expect scrutiny by federal and state regulators and others of our collection, use and disclosure of health information. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and states’ attorneys general to regulate the collection, use, storage, and disclosure of personal or personally identifiable information, through websites or otherwise, and to regulate the presentation of website content. Our marketing and patient engagement activities are subject to communications laws such as the Telephone Consumer Protection Act, or the TCPA, and the Controlling the Assault of Non-Solicited Pornography and Marketing Act, or CAN-SPAM. Determination by a court or regulatory agency that our calling, texting or email practices violate the TCPA or CAN-SPAM could subject us to civil penalties and could require us to change some portions of our business. Even an unsuccessful challenge by patients or regulatory authorities of our activities could result in adverse publicity and could require a costly response from and defense by us.
Other federal and state laws that restrict the use and protect the privacy and security of personally identifiable information may not be preempted by HIPAA, may apply to new categories of health information, such as “consumer health data,” and may be subject to varying interpretations by the courts and government agencies. Other federal and state laws that restrict the use and protect the privacy and security of personally identifiable information may not be preempted by HIPAA, may apply to new categories of health information, such as “consumer health data”, and may be subject to varying interpretations by the courts and government agencies. These varying interpretations can create complex compliance issues for us and our partners and potentially expose us to additional expense, adverse publicity, and liability, any of which could adversely affect our business.
Although we strive to comply with applicable laws and regulations, the requirements related to the collection, use, storage, processing, disclosure, retention, privacy and security of health and other regulated, sensitive or confidential information are evolving rapidly and may be interpreted or applied in an inconsistent manner across jurisdictions. The cost of compliance with these laws and regulations is high and is likely to increase in the future. Any failure or perceived failure by us to comply with applicable data privacy and security laws or regulations, our internal policies and procedures or our contracts governing our processing of health and other regulated, sensitive or confidential information, or to otherwise adequately address privacy and security concerns, could result in negative publicity, government investigations and enforcement actions, claims by third parties and damage to our reputation, any of which could have a material adverse effect on our business, operations, or financial results.
Healthcare technology initiatives, particularly those related to sharing patient data and interoperability, may adversely affect our business and results of operations.
CMS incentivizes the adoption and meaningful use of certified EHR technology through its Medicare Promoting Interoperability Programs and Quality Payment Program. Eligible hospitals that fail to demonstrate meaningful use of certified EHR technology and have not applied and qualified for a hardship exception are subject to reduced reimbursement from Medicare. Eligible healthcare professionals are also subject to positive or negative payment adjustments based, in part, on their use of EHR technology. Thus, any failure by our hospitals and employed professionals to properly adopt, maintain, and utilize certified EHR systems may have an adverse effect on our consolidated financial position and consolidated results of operations.
As EHR technologies have become widespread, the federal government has increased its focus on promoting patient access to healthcare data and interoperability. The 21st Century Cures Act and implementing regulations prohibit information blocking by healthcare providers and certain other entities. Information blocking is defined as engaging in activities that are likely to interfere with the access, exchange or use of electronic health information, subject to limited exceptions. A hospital found to have engaged in information blocking will not qualify as a “meaningful electronic health record user” under the Medicare Promoting Interoperability Program and as a result will lose 75% of the annual market basket increase it would otherwise receive, and MIPS-eligible clinicians, ACOs and ACO participants face similar disincentives.
Current and future initiatives related to healthcare technology (including AI/ML), data sharing, and interoperability may require changes to our operations, impose new and complex obligations on us, affect our relationships with providers, vendors, healthcare information exchanges and other third parties and require investments in infrastructure. We may be subject to significant penalties or other disincentives or experience reputational damage for failure to comply with applicable laws and regulations. It is difficult to predict how these initiatives will affect our relationships with providers and vendors, participation in healthcare information exchanges or networks, the exchange of patient data and patient engagement.
We have been allocating significant resources to develop, accelerate and implement our healthcare technology initiatives, including various AI/ML capabilities. The development of such AI/ML capabilities is complex and uncertain, and presents various risks and uncertainties. Our efforts to integrate AI/ML capabilities into our operations may result in unanticipated consequences and complications, and if we do not successfully implement our AI/ML systems and initiatives, or if we encounter other failures in our AI/ML systems or initiatives, this could result in legal and regulatory risk, and otherwise adversely impact us. Further, if we fail to implement AI/ML technologies and systems as effectively or rapidly as our competitors, our operations and financial results could be adversely impacted.
43
In addition, the legal, regulatory and ethical framework with respect to AI/ML initiatives is evolving, and remains uncertain. For example, HHS imposes transparency requirements for AI and other predictive algorithms used in certified health information technology, such as decision support interventions. For example, in December 2023, HHS finalized transparency requirements for AI and other predictive algorithms used in certified health information technology, such as decision support interventions. We expect that additional laws, regulations, and policies will be enacted, including as a result of changes in the presidential administration, and existing laws and regulations may be interpreted in new ways, which could affect our operations and the ways in which we may use AI technology (e.g., the use of clinical support decision tools in patient care). Further, there is additional uncertainty regarding the effectiveness of state laws related to artificial intelligence as the result of an executive order issued by the current presidential administration in December 2025, which directs federal regulators to challenge and preempt state laws that the administration views as obstructive to artificial intelligence innovation. If we are unable to use AI/ML as the result of such laws and regulations, regulators restrict our ability to use AI/ML for certain purposes or our confidential information becomes part of a dataset that is accessible by other third-party AI/ML applications and uses, it could make our business less efficient, result in competitive disadvantages, increase our operating costs, hinder our ability to provide services, and subject us to potential liabilities. If we are unable to use 38 AI/ML as the result of such laws and regulations, regulators restrict our ability to use AI/ML for certain purposes or our confidential information becomes part of a dataset that is accessible by other third-party AI/ML applications and uses, it could make our business less efficient, result in competitive disadvantages, increase our operating costs, hinder our ability to provide services, and subject us to potential liabilities. In addition, to the extent we use, may use or permit the data we create, receive, maintain, and transmit to be used by any AI/ML platforms, we may be subject to additional risks under health privacy and other laws and regulations. The cost to comply with applicable laws and regulations could be significant and could adversely affect our business, financial condition and results of operations. Further, the cost to comply with such laws and regulations could be significant and could adversely affect our business, financial condition and results of operations. Any failure or perceived failure by us to comply with AI/ML laws and regulations could result in proceedings, investigations or actions against us by individuals, consumer rights groups, government agencies or others. We could incur significant costs in investigating and defending such claims and, if found liable, pay significant damages or fines or be required to make changes to our technology and business. Any such proceedings and any subsequent adverse outcomes may subject us to significant negative publicity. Further, any such proceedings and any subsequent adverse outcomes may subject us to significant negative publicity. In addition, AI/ML technologies are rapidly changing and present evolving legal, regulatory and ethical issues, including claims of bias, discrimination, a perceived lack of transparency, as well as sometimes unpredictable behaviors or improper use of copyrighted or other protected material, any of which could expose us to reputational or legal risk and inhibit our use of AI/ML technologies. While the ultimate impact of regulatory and legal risks associated with AI/ML is not fully known, if any of these events were to occur, our business, results of operations and financial condition could be materially adversely affected. While the full impact of regulatory and legal risks associated with AI/ML is unknown, if any of these events were to occur, our business, results of operations and financial condition could be materially adversely affected.
State efforts to regulate the construction, acquisition or expansion of healthcare facilities could limit our ability to build or acquire additional healthcare facilities, renovate our facilities or expand the breadth of services we offer. State efforts to regulate the construction, acquisition or expansion of healthcare facilities could limit our ability to build or acquire additional healthcare facilities, renovate our facilities or expand the breadth of services we offer.
Some states in which we operate require a CON or other prior approval for the construction or acquisition of healthcare facilities, capital expenditures exceeding a prescribed amount, changes in bed capacity or services and some other matters. Some states in which we operate require a CON or other prior approval for the construction or acquisition of healthcare facilities, capital expenditures exceeding a prescribed amount, changes in bed capacity or services and some other matters. In evaluating a proposal, these states consider the need for additional or expanded healthcare facilities or services. If we are not able to obtain required CONs or other prior approvals, we will not be able to acquire, operate, replace or expand our facilities or expand the breadth of services we offer. Furthermore, if a CON or other prior approval upon which we relied to invest in construction of a replacement or expanded facility were to be lost through an appeal process or revoked, we may not be able to recover the value of our investment.
Many states have adopted legislation regarding the sale or other disposition of hospitals operated by municipal or not-for-profit entities. Many states have adopted legislation regarding the sale or other disposition of hospitals operated by municipal or not-for-profit entities. In some states that do not have specific legislation, the attorneys general have demonstrated an interest in these transactions under their general obligation to protect the use of charitable assets. These legislative and administrative efforts focus primarily on the appropriate valuation of the assets divested and the use of the proceeds of the sale by the non-profit seller. In addition, some states require for-profit entities, including hospitals, to notify state attorneys general or other designated entities in advance of sales or other transactions. While these notice requirements, reviews and, in some instances, approval processes can add additional time to the closing of a hospital acquisition, we have not yet had any significant difficulties or delays in completing acquisitions. However, if we encounter delays when we seek to acquire hospitals or a state prohibits a transaction, these restrictions could have a negative impact on our business and growth plans.
We may incur additional tax liabilities. We may incur additional tax liabilities.
We are subject to tax in the United States as well as those states in which we do business. We are subject to tax in the United States as well as those states in which we do business. Changes in tax laws, including increased rates, or interpretations of tax laws by taxing authorities or other standard setting bodies, could increase our tax obligations and materially and adversely impact our results of operations.
Risks Related to Impairment
If the fair value of our reporting unit declines, a material non-cash charge to earnings from impairment of our goodwill could result.
On an ongoing basis, under U.S. GAAP, we evaluate, based on the fair value of our reporting unit, whether the carrying value of our goodwill is impaired when events or changes in circumstances indicate that such carrying value may not be recoverable. Goodwill is evaluated for impairment annually and when an event occurs or circumstances change that, more likely than not, reduce the fair value of the reporting unit below its carrying value.
44
In assessing the fair value of this reporting unit, we consider, among other things, the most recent price of our common stock and fair value of our long-term debt, our recent financial results, estimates of future revenue and expense growth, estimated market multiples, expected capital expenditures, income tax rates, costs of invested capital and a discount rate. We performed our last annual goodwill impairment evaluation during the fourth quarter of 2025 using the October 31, 2025 measurement date, which indicated no impairment.
We could record material impairment charges in the future if our estimates or assumptions with respect to such fair value determination change in the future. In this regard, we recorded material non-cash impairment charges with respect to our hospital operations reporting unit in 2016 and 2017.
A significant decline in operating results or other indicators of impairment at one or more of our facilities could result in a material non-cash charge to earnings to impair the value of long-lived assets.
Our operations are capital intensive and require significant investment in long-lived assets, such as property, equipment and other long-lived intangible assets, including capitalized internal-use software. Our operations are capital intensive and require significant investment in long-lived assets, such as property, equipment and other long-lived intangible assets, including capitalized internal-use software. If one of our facilities experiences declining operating results or is adversely impacted by one or more of these risk factors, we may not be able to recover the carrying value of those assets through our future operating cash flows. On an ongoing basis, we evaluate whether changes in future undiscounted cash flows reflect an impairment in the fair value of our long-lived assets. Additionally, if we decide to sell a business, we evaluate whether a business or a group of businesses is impaired based on an analysis of the selling price from a definitive agreement compared to the carrying value of the net assets being sold. We have incurred, and expect to continue to incur, non-cash charges to earnings, which may be material, where the carrying value of our long-lived assets is impaired.
Risks Related to Cybersecurity and Technology
Our operations could be significantly impacted by interruptions or restrictions in access to our information systems.
Our operations depend heavily on the proper function, availability and security of our information systems, as well as those of our third-party providers, to collect, maintain, process and use sensitive data and other clinical, operational and financial information. Information systems require an ongoing commitment of significant resources to maintain and enhance existing systems and to develop new systems in order to keep pace with continual changes in information technology. Failure to adequately manage implementation of new technology, updates or enhancements of platforms or interfaces between platforms could place us at a competitive disadvantage, disrupt our operations, and have a material, adverse impact on our business and results of operations. Further, we may be adversely impacted by costs associated with new and expensive technology. In addition, we rely on third-party providers of financial, clinical, patient accounting and network information services, including those that interface with our own systems, and, as a result, we face operational challenges in maintaining multiple provider platforms and facilitating the interface of such systems with one another. We rely on these third-party providers to have appropriate controls to protect confidential information and other sensitive or regulated data. While we take steps to require third-party providers to protect confidential information and sensitive data, we do not control the information systems of third-party providers, and in some cases, we may have difficulty accessing information archived on or otherwise processed by third-party systems.
Our networks and information systems, and the networks and information systems of third parties that we rely upon, are also subject to disruption due to events such as a natural disaster, fire, telecommunications failure, power outages, new system implementations, computer viruses, ransomware or other malware, security breaches, cyber-attacks (including ransomware), human acts (such as inadvertent or intentional misuse by employees), acts of war, terrorist or criminal activities or other catastrophic events. Disaster recovery planning, whether conducted by us or a third party, cannot account for all eventualities, and may not be sufficient to mitigate against or recover from such events. If the information systems on which we rely fail or are interrupted or if our access to these systems is limited in the future, or if we experience data loss or manipulation, it could result in harm to patients, unauthorized disclosure, misuse, loss or alteration of such data, interruptions and delays in our normal business operations, potential liability under applicable laws, regulatory penalties, and damage to our reputation. If the information systems on which we rely fail or are interrupted or if our access to these systems is limited in the future, or if we experience data loss or manipulation, it could result in unauthorized disclosure, misuse, loss or alteration of such data, interruptions and delays in our normal business operations, potential liability under applicable laws, regulatory penalties, and damage to our reputation. Any of these could have an adverse effect on our business, financial condition or results of operations.
A cyber-attack or security breach could result in the compromise of our facilities, confidential data or critical data systems and give rise to potential harm to patients, remediation and other expenses, expose us to liability under HIPAA, privacy and data protection laws and regulations, consumer protection laws, common law or other theories, subject us to litigation and federal and state governmental inquiries or actions, damage our reputation, adversely impact our financial results and otherwise be disruptive to our business.
45
We rely extensively on information technology systems to manage clinical and financial data, to communicate with our patients, payors, vendors and other third parties, to summarize and analyze operating results, and for a number of other critical operational functions. We have made significant investments in technology to protect our systems, equipment and medical devices and information from cybersecurity risks. These risks include incidents involving ransomware and other malicious software, phishing, advanced persistent threats, social engineering, credential stuffing or distributed denial-of-service attacks, or other attempts by third parties to access, acquire, use, disclose, misappropriate or manipulate our information or disrupt our operations. These risks include incidents involving ransomware and other malicious software, phishing, or other attempts by third parties to access, acquire, use, disclose, misappropriate or manipulate our information or disrupt our operations. Although we monitor and routinely test our security systems and processes and have redundancies as well as other proactive measures designed to protect the integrity, security and availability of the systems and data we manage and control, there can be no assurance that we, or our third-party vendors and providers, will not be subject to security breaches and other cybersecurity incidents. In this regard, we are frequently the target of cybersecurity attacks and other threats that could have a security impact, and we have experienced cybersecurity incidents from time to time. In particular, on February 13, 2023, we disclosed a security incident in which a third-party vendor who provides a secure file transfer software platform utilized by our subsidiaries experienced a security breach whereby PHI and personal information of certain patients of our healthcare facilities were exposed to an unauthorized third party.
The current cyber threat environment presents increased risk for all companies, particularly companies in the healthcare industry, as the volume and intensity of cyber-attacks on hospitals and health systems have continued to increase, and we expect to experience an increase in cybersecurity threats in the future. Moreover, advanced new attacks against our information systems and devices or those of our third-party vendors create risk of cybersecurity incidents, including ransomware, malware and phishing incidents. The preventive actions we take to reduce the risk of such incidents and protect our systems and data may not be sufficient in the future. In addition, cybersecurity threats continue to evolve. Additionally, the rapid evaluation and increased adoption of AI and ML technologies may heighten our cybersecurity risks by making cyber-attacks more difficult to detect, contain and mitigate, particularly with detection devices that use voice recognition or authentication. Additionally, the rapid evaluation and increased adoption of artificial intelligence technologies may heighten our cybersecurity risks by making cyber-attacks more difficult to detect, contain and mitigate. Because the techniques used in cyber-attacks change frequently and may not be immediately recognized, we may experience security or data breaches that remain undetected for an extended time. We may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities, and we still might not be able to anticipate or prevent certain attack methods.
Further, cybersecurity threats, including those that result in a data or security breach, could impact the integrity, availability or security of PHI and other data subject to privacy laws and regulations, disrupt our information technology systems, equipment, medical devices or business and threaten the access and utilization of critical information technology and data. Our ability to provide various healthcare services could be affected, particularly with respect to telehealth services. In addition, medical devices that connect to hospital networks or the internet may be vulnerable to cybersecurity incidents, which may impact patient safety.
We may be at increased risk because we outsource certain services or functions to, or have systems that interface with, third parties. Some of these third parties’ information systems are also subject to the risks outlined above and may store or have access to our data and may not have effective controls, processes or practices to protect our information from attack, damage or unauthorized access, acquisition, use or disclosure. A breach or attack affecting any of these third parties could harm our business. In addition, the definitive agreements we enter into in connection with the divestiture of hospitals routinely obligate us to provide transition services to the buyer, including access to our legacy information systems, for a defined transition period. By providing access to our information systems to non-employees, we may be exposed to cyber-attacks, ransomware or security or data breaches that originate outside of our internal processes and practices designed to prevent such threats from occurring. Further, consumer confidence in the integrity, availability and confidentiality of information systems and information, including patient information and operations data, in the healthcare industry generally could be impacted to the extent there are successful cyber-attacks at other healthcare services companies, which could have a material adverse effect on our business, operations or financial results.
As cyber threats continue to evolve and increase in volume and sophistication, we may be required to expend significant additional resources to continue to modify or enhance our protective measures. We may also be required to incur additional expenses to comply with evolving federal and state requirements related to cybersecurity, including those focused on healthcare providers. Despite our efforts to minimize our exposure to cyber-attacks, there can be no assurance that our controls and procedures, and cyber risk management processes, will be sufficient or timely in protecting our processes and information. Cybersecurity and the continued development and enhancement of our controls, process and practices designed to protect our information systems from attack, damage or unauthorized access, acquisition, use or disclosure remain a priority for us. If we or our information, systems are subject to cyber-attacks or security or data breaches in the future, or the information systems of third parties with whom we conduct business are subject to cyber-attacks or security or data breaches in the future in a manner which impacts us or our information systems, this could result in harm to patients; business and operational interruptions and delays; the loss, misappropriation, corruption or unauthorized access, acquisition, use or disclosure of data or inability to access data; litigation and potential liability under privacy, security, breach notification and consumer protection laws or other applicable laws, including HIPAA; reputational damage; federal and state governmental inquiries, civil monetary penalties, settlement agreements, corrective action plans and monitoring requirements, any of which could have an adverse effect on our business, financial condition or results of operations. If we or our information, systems are subject to cyber-attacks or security or data breaches in the future, or the information systems of third parties with whom we conduct business are subject to cyber-attacks or security or data breaches in the future in a manner which impacts us or our information systems, this could result in harm to patients; business and operational interruptions and delays; the loss, misappropriation, corruption or unauthorized access, acquisition, use or disclosure of data or inability to access data; litigation and potential liability under privacy, security, breach notification and consumer protection laws or other applicable laws, including HIPAA; reputational damage, federal and state governmental inquiries, civil monetary penalties, settlement agreements, corrective action plans and monitoring requirements, any of which could have an adverse effect on our business, financial condition or results of operations. Moreover, any significant cybersecurity event may require us to devote significant management time and resources to address and respond to any such event, interfere with the pursuit of other important business strategies and initiatives, and cause us to incur additional
46
expenditures, which could be material, including to investigate such events, remedy cybersecurity problems, recover lost data, prevent future compromises and adapt systems and practices in response to such events. Further, there is no assurance that any remedial actions will meaningfully limit the success of future attempts to breach our information systems, particularly because malicious actors are increasingly sophisticated and utilize tools and techniques specifically designed to circumvent security measures, avoid detection and obfuscate forensic evidence, which means we may be unable to identify, investigate or remediate effectively or in a timely manner.
Additionally, we are subject to an increasing number of cybersecurity reporting obligations in different jurisdictions that vary in their scope and application, which may create conflicting reporting obligations and inhibit our ability to quickly provide complete and reliable information to patients, business relations, and regulators, as well as to the public. Moreover, while we have insurance coverage in place designed to address certain aspects of cybersecurity risks, such insurance coverage may exclude certain types of claims or otherwise be insufficient to cover all losses or all types of claims that may arise. Additionally, while we have insurance coverage in place designed to address certain aspects of cybersecurity risks, such insurance coverage may be insufficient to cover all losses or all types of claims that may arise.
If we fail to comply with our obligations under license or technology agreements with third parties, we may be required to pay damages and we could lose license rights that are critical to our business.
We license certain intellectual property, including technologies and software from third parties, that is important to our business, and in the future, we may enter into additional agreements that provide us with licenses to valuable intellectual property or technology. If we fail to comply with any of the obligations under our license agreements, we may be required to pay damages and the licensor may have the right to terminate the license. Termination by the licensor would cause us to lose valuable rights, and could prevent us from selling our solutions and services, or adversely impact our ability to commercialize future solutions and services. Our business would suffer if any current or future licenses terminate, if the licensors fail to abide by the terms of the license agreement, if the licensors fail to enforce licensed intellectual property against infringing third parties, if the licensed intellectual property are found to be invalid or unenforceable, or if we are unable to enter into necessary license agreements on acceptable terms or at all. Any of the foregoing could have an adverse effect on our business, financial condition or results of operations.
47
Item 1B. Unresolved Staff Comments
None
Item 1C. Cybersecurity
Risk Management
We place the utmost importance on information security and privacy, including protecting the personal medical, financial and insurance information of our patients and employees. As part of a larger digital technology program, we have a cybersecurity risk management program designed to assess, identify and manage material risks from cybersecurity threats. Our cybersecurity risk management program is designed to employ industry best practices across our operations and business functions, including through monitoring and assessing our threat environment; vulnerability assessments; detecting and responding to cyber-attacks, cybersecurity incidents, and data breaches; cybersecurity crisis preparedness and incident response plans; and investments in cybersecurity infrastructure and technology intended to reduce cybersecurity risk. Our cybersecurity risk management program is designed to employ industry best practices across our operations and business functions, including through monitoring and assessing our threat environment; vulnerability assessments; detecting and responding to cyber attacks, cybersecurity incidents, and data breaches; cybersecurity crisis preparedness and incident response plans; and investments in cybersecurity infrastructure and technology intended to reduce cybersecurity risk. Key aspects of our cybersecurity risk management program include the following:
We
The current cyber threat environment presents increased risk for all companies, particularly companies in our industry, as the volume and intensity of cybersecurity attacks on hospitals and health systems has continued to increase. We are regularly the target of cybersecurity attacks and other threats that could have a security impact, and we have experienced security incidents from time to time.
48
consumer protection laws, common law or other theories, subject us to litigation and federal and state governmental inquiries and actions, damage our reputation, adversely impact our financial results and otherwise be disruptive to our business.” included in Part I, Item 1A of this Form 10-K.
We maintain a cybersecurity insurance policy that provides coverage in connection with cybersecurity incidents. However, costs and damages associated with cybersecurity incidents may not be fully insured under our insurance policy, and (to the extent otherwise covered) are subject to applicable deductibles. However, costs and damages associated with cybersecurity incidents may not be fully insured under our insurance policy, and (to the extent otherwise covered) are subject to applicable deductibles.
Governance
Risk management is administered at a management level through a multi-disciplinary Enterprise Risk Committee comprised of members of management, including our CDIO. Risk management is administered at a management level through a multi-disciplinary Enterprise Risk Committee comprised of members of management, including our CISO. The Enterprise Risk Committee identifies and monitors what we believe to be the key risks currently facing the organization, including cybersecurity risks. A comprehensive presentation regarding our enterprise risk management process and our key risks is presented to the full Board of Directors on an annual basis.
In addition, we have a Technology Risk Executive Steering Committee, a multi-disciplinary management-level team chaired by our CDIO which is responsible for assessing and overseeing our information security and cybersecurity risk management policies, practices and priorities and for assessing and monitoring key cybersecurity risks with respect to reporting such risks within the organization.
A key component of our enterprise risk management program is our incident response plan, which provides for controls and procedures in connection with cybersecurity incidents. A key component of our enterprise risk management program is our incident response plan, which provides for controls and procedures in connection with cybersecurity incidents. Under this plan, we have a cybersecurity incident command, a multi-disciplinary management-level team led by the CISO. Under this plan, we have established a cybersecurity incident command, a multi-disciplinary management-level team led by the CISO.
49
Recently Filed
| Ticker * | File Date |
|---|---|
| IRTC | an hour ago |
| GCMG | an hour ago |
| ED | an hour ago |
| IAUX | an hour ago |
| LNC | an hour ago |
| TSCO | an hour ago |
| MSTR | an hour ago |
| GH | an hour ago |
| MIR | an hour ago |
| CSGS | an hour ago |
| LKQ | an hour ago |
| DTM | an hour ago |
| BG | an hour ago |
| THRM | an hour ago |
| SEM | an hour ago |
| TVTX | an hour ago |
| KALU | an hour ago |
| LYV | an hour ago |
| FTI | an hour ago |
| MS | an hour ago |
| ICUI | an hour ago |
| ET | an hour ago |
| BNL | an hour ago |
| OWL | 2 hours ago |
| BTU | 2 hours ago |
| EFX | 2 hours ago |
| PTCT | 2 hours ago |
| RPD | 2 hours ago |
| MET | 2 hours ago |
| IEX | 2 hours ago |
| CNDT | 2 hours ago |
| SPSC | 2 hours ago |
| CYH | 2 hours ago |
| SLM | 2 hours ago |
| STT | 2 hours ago |
| WSC | 2 hours ago |
| NPO | 2 hours ago |
| FFBC | 2 hours ago |
| SUNC | 2 hours ago |
| FDP | 2 hours ago |
| SUN | 2 hours ago |
| UDMY | 2 hours ago |
| OPEN | 2 hours ago |
| MSEX | 2 hours ago |
| ULS | 2 hours ago |
| GATX | 2 hours ago |
| RMAX | 2 hours ago |
| CTO | 2 hours ago |
| GLPI | 2 hours ago |
| AIZ | 2 hours ago |