HCA Healthcare (HCA) risk factors, FY2025 10-K

HCA Healthcare's FY2025 10-K, filed Feb 10, 2026, lists 34 risk factors in 8 groups. Against the prior year's 36: 7 new, 9 dropped, 18 substantially reworded.

Open HCA in Gloom →
HCA Healthcare's chart, financials and news, free in your browser.Open HCA in Gloom →
Risk factors listed
348 groups
New this year
7vs 36 last year
Dropped
9since the prior 10-K
Substantially reworded
18of those kept
Section length
16k wordsItem 1A

What the changes say

  • HCA faces new risks regarding senior credit facility ratios, weather disasters, and AI adoption in EHR platforms.

What changed since the prior 10-K

New

  • NewRisks related to our indebtedness

    consolidate, merge, sell or otherwise dispose of all or substantially all of our assets

    A breach of financial ratios under our senior unsecured credit facility could trigger an acceleration of debt repayment.

  • NewRisks related to technology, data privacy and cybersecurity

    Our operations could be impaired by a failure in or breach of our information systems or those of third parties on whose systems our business relies

    Failures in our information systems or third-party systems could severely impair hospital accounting, billing, and care coordination operations.

  • NewRisks related to technology, data privacy and cybersecurity

    Failure to effectively manage change associated with our technology, resiliency and other initiatives, including with respect to the implementation of a new EHR platform, may adversely affect our business, services and results of operations

    Implementing a new electronic health record platform across our facilities introduces risks of cost overruns and operational disruptions.

  • NewRisks related to public health crises

    The emergence and effects related to a potential future pandemic, epidemic or outbreak of an infectious disease could adversely affect our business and operations

    Future infectious disease outbreaks could reduce patient trust and cause declines in elective procedure volumes at our facilities.

  • NewRisks related to governmental regulation and other legal matters

    rate-setting measures, including limits on hospital rates. Other industry participants, such as private payers and large employer groups and their affiliates, may also introduce financial or delivery system reforms

    Public policy changes, trade policies, and new tariffs could disrupt our supply chain operations and financial results.

  • NewRisks related to operations, strategy, demand and competition

    Our business and operations are subject to risks related to hurricanes, extreme weather events or other natural disasters

    Hurricanes and extreme weather events in Florida, Texas, and coastal states could cause property damage and temporary hospital closures.

  • NewRisks related to operations, strategy, demand and competition

    indicating that features of models may include requirements that all alternative payment models involve downside risk or that some financial risk shift from conveners to providers. The CMS Innovation Center has also indicated that it plans to test improvements in Medicare Advantage and Medicaid

    State and federal value-based care initiatives, including CMS rules on state-directed payments, may alter reimbursement structures for our hospitals.

Dropped

  • DroppedRisks related to our indebtedness

    to enable us to make payments in respect of our indebtedness. Each subsidiary is a distinct legal entity, and, under certain circumstances, legal and contractual restrictions may limit our ability to obtain cash from our subsidiaries

  • DroppedRisks related to our indebtedness

    enter into certain transactions with our affiliates

  • DroppedRisks related to technology, data privacy and cybersecurity

    Our operations could be impaired by a failure of our information systems

    Refinancing risk dependent on global economic and financial conditions.

  • DroppedRisks related to technology, data privacy and cybersecurity

    systems, we could be subject to penalties that may have an adverse effect on our financial condition and results of operations

  • DroppedRisks related to technology, data privacy and cybersecurity

    We may not be adequately reimbursed by third-party payers for services involving new technology

    Asset-based revolving credit facility borrowing base limitations.

  • DroppedRisks related to public health crises

    As a front-line provider of health care services, we are subject to the health and economic effects of public health conditions

  • DroppedRisks related to operations, strategy, demand and competition

    Our business and operations are subject to risks related to changing global weather patterns

  • DroppedRisks related to operations, strategy, demand and competition

    increase in climate-related events that result in material losses we may be unable to obtain similar levels of property insurance coverage in the future

  • DroppedRisks related to macroeconomic conditions

    investments in future periods should issuers default on interest payments or should the fair market valuations of the securities deteriorate due to ratings downgrades or other issue specific factors

    Information systems failure risks.

Reworded

  • 89% rewrittenRisks related to technology, data privacy and cybersecurity

    Health care technology initiatives, particularly those related to sharing patient data and interoperability and AI, involve risks that may adversely affect our operations

    Added artificial intelligence to the scope of technology risks affecting patient data sharing and interoperability initiatives.

  • 70% rewrittenRisks related to our indebtedness

    We may not be able to generate sufficient cash to service all of our indebtedness and may not be able to refinance our indebtedness on favorable terms. If we are unable to do so, we may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful

    Refined subsidiary distribution constraints regarding our ability to service indebtedness.

  • 70% rewrittenRisks related to our indebtedness

    Our debt agreements contain restrictions that limit our flexibility in operating our business

    Updated debt covenant language to reference our senior unsecured credit facility instead of senior secured credit facilities.

  • 62% rewrittenRisks related to operations, strategy, demand and competition

    The industry trend toward value-based purchasing may negatively impact our revenues

    Retained core value-based purchasing description regarding Medicare quality reporting and never-event penalties.

  • 50% rewrittenRisks related to governmental regulation and other legal matters

    Changes in government health care programs may adversely affect our revenues and business

    Updated Medicare and Medicaid revenue reliance figure to 45.4% for 2025, up from 44.5% in 2024.

  • 50% rewrittenRisks related to macroeconomic conditions

    We are exposed to market risk related to changes in the market values of securities and interest rates

    Updated investment securities held by insurance subsidiaries to $588 million with $14 million in unrealized losses as of December 31, 2025.

  • 47% rewrittenRisks related to operations, strategy, demand and competition

    Any increase in the volume of uninsured patients or deterioration in the collectability of uninsured and patient due accounts could adversely affect our results of operations

    Updated uncompensated care figures, reporting $4.605 billion for 2025 versus $4.366 billion for 2024, and implicit price concessions of $7.674 billion.

  • 43% rewrittenRisks related to operations, strategy, demand and competition

    Third-party payer controls designed to reduce costs and other payer practices intended to decrease inpatient services, surgical procedure volumes or reimbursement for services rendered may reduce our revenues

    Added a specific mention of the 2026 CMS WISeR model utilizing AI for fee-for-service Medicare coverage compliance.

  • 34% rewrittenRisks related to operations, strategy, demand and competition

    Our facilities are heavily concentrated in Florida and Texas, which makes us sensitive to regulatory, economic, public health, environmental and competitive conditions and changes in those states

  • 32% rewrittenRisks related to macroeconomic conditions

    Our overall business results may suffer during periods of significant inflation, general economic weakness or recessions or as a result of changing governmental policies

    Was: Our overall business results may suffer during periods of general economic weakness or recessions

  • 29% rewrittenRisks related to human capital

    Our performance depends on our ability to recruit and retain quality physicians

  • 29% rewrittenRisks related to ownership of our common stock

    There can be no assurance that we will continue to pay dividends

  • 28% rewrittenRisks related to operations, strategy, demand and competition

    Changes to physician utilization practices and treatment methodologies and other factors outside our control that impact demand for medical services may reduce our revenues

  • 26% rewrittenRisks related to technology, data privacy and cybersecurity

    monitoring quality of care and collecting data on quality measures necessary for full Medicare payment updates

  • 25% rewrittenRisks related to our indebtedness

    limiting our ability to adjust to changing market conditions and placing us at a competitive disadvantage compared to our competitors who have less debt

  • 23% rewrittenRisks related to governmental regulation and other legal matters

    State efforts to regulate the construction or expansion of health care facilities could impair our ability to operate and expand our operations

  • 23% rewrittenRisks related to operations, strategy, demand and competition

    We may encounter difficulty acquiring hospitals and other health care businesses, encounter challenges integrating the operations of acquired hospitals and other health care businesses and/or become liable for unknown or contingent liabilities as a result of acquisitions

  • 20% rewrittenRisks related to ownership of our common stock

    Certain of our investors may continue to have influence over us

All 34 risk factors

Headings as the filing states them, in filing order.

Risks related to our indebtedness

  1. 01limiting our ability to adjust to changing market conditions and placing us at a competitive disadvantage compared to our competitors who have less debt25% rewritten
  2. 02We may not be able to generate sufficient cash to service all of our indebtedness and may not be able to refinance our indebtedness on favorable terms. If we are unable to do so, we may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful70% rewritten
  3. 03Our debt agreements contain restrictions that limit our flexibility in operating our business70% rewritten
  4. 04consolidate, merge, sell or otherwise dispose of all or substantially all of our assetsNew

Risks related to human capital

  1. 05Our results of operations may be adversely affected by competition for staffing, the shortage of experienced nurses and other health care professionals and labor union activity
  2. 06Our performance depends on our ability to recruit and retain quality physicians29% rewritten
  3. 07We may be unable to attract, hire and retain a highly qualified workforce, including key management

Risks related to technology, data privacy and cybersecurity

  1. 08Our operations could be impaired by a failure in or breach of our information systems or those of third parties on whose systems our business reliesNew
  2. 09monitoring quality of care and collecting data on quality measures necessary for full Medicare payment updates26% rewritten
  3. 10Health care technology initiatives, particularly those related to sharing patient data and interoperability and AI, involve risks that may adversely affect our operations89% rewritten
  4. 11Failure to effectively manage change associated with our technology, resiliency and other initiatives, including with respect to the implementation of a new EHR platform, may adversely affect our business, services and results of operationsNew

Risks related to public health crises

  1. 12The emergence and effects related to a potential future pandemic, epidemic or outbreak of an infectious disease could adversely affect our business and operationsNew

Risks related to governmental regulation and other legal matters

  1. 13rate-setting measures, including limits on hospital rates. Other industry participants, such as private payers and large employer groups and their affiliates, may also introduce financial or delivery system reformsNew
  2. 14Changes in government health care programs may adversely affect our revenues and business50% rewritten
  3. 15If we fail to comply with extensive laws and government regulations, we could suffer penalties or be required to make significant changes to our operations
  4. 16environmental protection, including disposal of regulated materials
  5. 17State efforts to regulate the construction or expansion of health care facilities could impair our ability to operate and expand our operations23% rewritten
  6. 18We may incur additional tax liabilities
  7. 19We have been and could become the subject of government investigations, claims and litigation, as well as governmental and commercial payer audits
  8. 20We may be subject to liabilities from claims brought against our facilities, which are costly to defend and may require us to pay significant damages if not covered by insurance

Risks related to operations, strategy, demand and competition

  1. 21Our hospitals and other facilities face competition for patients from other hospitals and health care providers
  2. 22Any increase in the volume of uninsured patients or deterioration in the collectability of uninsured and patient due accounts could adversely affect our results of operations47% rewritten
  3. 23If our volume of patients with private health insurance coverage declines or we are unable to retain and negotiate favorable contracts with private third-party payers, including managed care plans, our revenues may be adversely affected
  4. 24Changes to physician utilization practices and treatment methodologies and other factors outside our control that impact demand for medical services may reduce our revenues28% rewritten
  5. 25Third-party payer controls designed to reduce costs and other payer practices intended to decrease inpatient services, surgical procedure volumes or reimbursement for services rendered may reduce our revenues43% rewritten
  6. 26We may encounter difficulty acquiring hospitals and other health care businesses, encounter challenges integrating the operations of acquired hospitals and other health care businesses and/or become liable for unknown or contingent liabilities as a result of acquisitions23% rewritten
  7. 27Our facilities are heavily concentrated in Florida and Texas, which makes us sensitive to regulatory, economic, public health, environmental and competitive conditions and changes in those states34% rewritten
  8. 28Our business and operations are subject to risks related to hurricanes, extreme weather events or other natural disastersNew
  9. 29The industry trend toward value-based purchasing may negatively impact our revenues62% rewritten
  10. 30indicating that features of models may include requirements that all alternative payment models involve downside risk or that some financial risk shift from conveners to providers. The CMS Innovation Center has also indicated that it plans to test improvements in Medicare Advantage and MedicaidNew

Risks related to macroeconomic conditions

  1. 31Our overall business results may suffer during periods of significant inflation, general economic weakness or recessions or as a result of changing governmental policies32% rewritten
  2. 32We are exposed to market risk related to changes in the market values of securities and interest rates50% rewritten

Risks related to ownership of our common stock

  1. 33There can be no assurance that we will continue to pay dividends29% rewritten
  2. 34Certain of our investors may continue to have influence over us20% rewritten

Other HCA Healthcare 10-Ks

  • FY2024 10-K risk factors
    36 risks

    Heavy reliance on Medicare and Medicaid, which provided 44.5 percent of revenues in 2024.

    Filed Feb 14, 2025

About this page

The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.