Healthequity (HQY) risk factors, FY2026 10-K

Healthequity's FY2026 10-K, filed Mar 17, 2026, lists 44 risk factors in 4 groups. Against the prior year's 46: 4 new, 6 dropped, 12 substantially reworded.

Risk factors listed
444 groups
New this year
4vs 46 last year
Dropped
6since the prior 10-K
Substantially reworded
12of those kept
Section length
12k wordsItem 1A

What the changes say

  • HealthEquity expanded risks around marketplace partnerships and compounded GLP-1 weight loss regulations, increased AI fraud threats, and updated revenue figures.

What changed since the prior 10-K

New

  • NewRisks relating to our business and industry

    If we fail to operate our marketplace effectively, if our Network Partners, Clients, or members respond negatively to our marketplace, or if our marketplace partners, products, or services are disrupted, our business may be adversely affected

    Failures in operating our healthcare marketplace or negative responses from network partners and members could harm our business.

  • NewRisks relating to our business and industry

    In addition, negative publicity concerning our marketplace, our marketplace partners, or member experience using our marketplace could limit acceptance of this offering by our Network Partners, Clients, or members, which would adversely affect our revenue and future growth opportunities

    Negative publicity around our marketplace partners, including volatile regulatory environments for compounded GLP-1 medications, could hurt our growth.

  • NewLegal and regulatory risks

    Changes to regulations and the enforcement environment create uncertainty around our business and our Clients. In addition, changes to the legal, regulatory, or political environment may require management's attention, divert resources from other areas, and expose us to potential liability

    Uncertain federal contractor regulations and changes in federal employee participation could impact our financial results.

  • NewRisks relating to our partners and service providers

    Our acquisition and investment strategies may not be successful

    Our acquisition and investment strategies may fail to deliver anticipated benefits or expose us to unforeseen legal liabilities.

Dropped

  • DroppedRisks relating to our business and industry

    Achieving our business strategy depends in large part on the success of our recent CEO transition

  • DroppedRisks relating to our business and industry

    geopolitical events, including the war between Russia and Ukraine, have resulted in, and may continue to result in, an increase in cyber-attacks

  • DroppedRisks relating to our business and industry

    by insurance, premiums and/or deductibles related to our insurance coverage may increase or the scope of our coverage may decrease, any of which could have an adverse impact on our financial results

  • DroppedLegal and regulatory risks

    tax rates, enactments of new tax laws, revisions of tax regulations, and claims or litigation with taxing authorities could result in substantially higher taxes

  • DroppedLegal and regulatory risks

    Regulatory changes and changes in the enforcement environment under the new U.S. administration may have an adverse result on our business

  • DroppedRisks relating to our partners and service providers

    Our acquisition strategy may not be successful

Reworded

  • 92% rewrittenRisks relating to our business and industry

    Cyber attacks, including ransomware attacks, or other privacy or data security incidents could materially adversely impact our business

    Added geopolitical events like the Russia-Ukraine war and remote work environments as factors increasing cyber-attack risks.

  • 86% rewrittenLegal and regulatory risks

    Legislative, regulatory, and legal developments involving taxes could adversely affect our results of operations and cash flows

    Restored detailed tax litigation, sales and use tax interpretations, and tax law enactment risks into the legislative heading.

  • 70% rewrittenRisks relating to our business and industry

    Fraudulent activity, whether involving member accounts or our third-party service providers, has led, and could continue to lead, to financial and reputational damage to us and could reduce the use and acceptance of our products and services

    Added artificial intelligence as a sophisticated method used by criminals and cited specific losses in fiscal years 2025 and 2026.

  • 68% rewrittenLegal and regulatory risks

    Changes in applicable federal and state laws relating to HSAs and other CDBs could materially adversely affect our business

    Removed COVID-19 FSA and COBRA regulatory examples while retaining general regulatory uncertainty and reform risks.

  • 49% rewrittenRisks relating to our business and industry

    A decline in the value of invested HSA Assets would adversely affect our results of operations

    Clarified that asset value declines directly reduce fees received on invested HSA assets.

  • 47% rewrittenRisks relating to our business and industry

    The expanding use or anticipated use of AI technologies, including generative AI, by us or third parties, may increase or create new operational and competitive risks

    Updated AI risk language to note that usage by the company, service providers, and competitors has increased recently.

    Was: The use or anticipated use of AI technologies, including generative AI, by us or third parties, may increase or create new operational and competitive risks

  • 47% rewrittenRisks relating to our business and industry

    If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected

    Updated interchange fee revenue percentages and fiscal year references from 2023-2025 to 2024-2026.

  • 44% rewrittenRisks relating to our business and industry

    A decline in interest rates would reduce our income on our HSA Assets and Client-held funds and our ability to attract HSA contributions

    Updated partner fee revenue concentration percentages to 48%, 45%, and 39% for fiscal years 2026, 2025, and 2024.

  • 40% rewrittenRisks relating to our partners and service providers

    Integration of our acquisitions may not be successful, and we may not realize the synergies anticipated from our acquisitions

  • 32% rewrittenRisks relating to our partners and service providers

    Failure to manage future growth effectively could have a material adverse effect on our business, financial condition, and results of operations

  • 26% rewrittenLegal and regulatory risks

    The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations

  • 21% rewrittenRisks relating to our partners and service providers

    We may need to record write-downs from future impairments of identified intangible assets and goodwill

All 44 risk factors

Headings as the filing states them, in filing order.

Risks relating to our business and industry

  1. 01Any diminution in, elimination of, or change in the availability of tax benefits for HSAs and other CDBs would materially adversely affect us
  2. 02Failure to adequately place and safeguard HSA cash and Client-held funds, or the failure of any of our insurance company partners or Depository Partners, could materially and adversely affect our business, financial condition, and results of operations
  3. 03Failure to adequately manage the liquidity of the custodial assets held by our insurance company partners and Depository Partners could materially and adversely affect our business, financial condition, and results of operations
  4. 04A decline in interest rates would reduce our income on our HSA Assets and Client-held funds and our ability to attract HSA contributions44% rewritten
  5. 05A decline in the value of invested HSA Assets would adversely affect our results of operations49% rewritten
  6. 06If we are not successful in adapting to our rapidly evolving industry, our growth may be limited, and our business may be adversely affected
  7. 07Any diminution in the use of HSAs or other CDBs would materially adversely affect us
  8. 08The expanding use or anticipated use of AI technologies, including generative AI, by us or third parties, may increase or create new operational and competitive risks47% rewritten
  9. 09We may be unable to compete effectively against our current and future competitors
  10. 10Developments in the rapidly changing healthcare industry could adversely affect our business
  11. 11If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected47% rewritten
  12. 12If we fail to operate our marketplace effectively, if our Network Partners, Clients, or members respond negatively to our marketplace, or if our marketplace partners, products, or services are disrupted, our business may be adversely affectedNew
  13. 13In addition, negative publicity concerning our marketplace, our marketplace partners, or member experience using our marketplace could limit acceptance of this offering by our Network Partners, Clients, or members, which would adversely affect our revenue and future growth opportunitiesNew
  14. 14Failure to maintain effective internal control over financial reporting could have a material adverse effect on our reputation, results of operations, and financial condition
  15. 15Cyber attacks, including ransomware attacks, or other privacy or data security incidents could materially adversely impact our business92% rewritten
  16. 16Fraudulent activity, whether involving member accounts or our third-party service providers, has led, and could continue to lead, to financial and reputational damage to us and could reduce the use and acceptance of our products and services70% rewritten
  17. 17We rely on software licensed from third parties that may be difficult to replace or that could cause errors or failures of our technology platforms that could lead to lost customers or harm to our reputation
  18. 18Developing and implementing new and updated applications, features, and services for our technology platforms may be more difficult than expected, may take longer and cost more than expected, or may result in the platforms not operating as expected
  19. 19Disruptions of service at our facilities, our servers, our third-party data centers, or our cloud service providers have interrupted and delayed our customers’ access to our products and services and will be harmful if repeated
  20. 20Our technology platforms may link to or utilize open source software, and any failure to comply with the terms of one or more of these open source licenses could negatively affect our business

Legal and regulatory risks

  1. 21The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations26% rewritten
  2. 22Changes in applicable federal and state laws relating to HSAs and other CDBs could materially adversely affect our business68% rewritten
  3. 23Legislative, regulatory, and legal developments involving taxes could adversely affect our results of operations and cash flows86% rewritten
  4. 24Changes to regulations and the enforcement environment create uncertainty around our business and our Clients. In addition, changes to the legal, regulatory, or political environment may require management's attention, divert resources from other areas, and expose us to potential liabilityNew
  5. 25Changes in laws and regulations relating to interchange fees on payment card transactions could adversely affect our revenue and results of operations
  6. 26Failure to comply with, or changes in, payment card industry, credit card association or other network rules or standards set by Visa or changes in card association and debit network fees or products or interchange rates, could materially adversely affect us
  7. 27We are subject to complex regulation, and any compliance failures or regulatory action could adversely affect our business
  8. 28Our subsidiary HealthEquity Trust Company is a non-depository trust company and subject to regulation and supervision by the Wyoming Division of Banking
  9. 29If we are unable to meet or exceed the net worth test required by the IRS, we could be unable to maintain our non-bank custodian status

Risks relating to our service and culture

  1. 30Any failure to offer high-quality member, Client, and Network Partner support services could adversely affect our relationships with our members, Clients, and Network Partners and our operating results
  2. 31We rely on our management team and team members, and our business could be harmed if we are unable to retain qualified personnel
  3. 32If we cannot maintain our corporate culture as we grow, we could lose the innovation, teamwork, passion, and focus on execution that we believe contribute to our success

Risks relating to our partners and service providers

  1. 33If our Network Partners choose to partner with other providers of, or otherwise reduce offering or cease to offer, our products and services, our business could be materially and adversely affected
  2. 34A change in relationship with our bank identification number sponsor, or the failure by our sponsor to comply with certain banking regulations, could materially and adversely affect our business
  3. 35Replacing our third-party service providers would be difficult and disruptive to our business
  4. 36Our acquisition and investment strategies may not be successfulNew
  5. 37Failure to manage future growth effectively could have a material adverse effect on our business, financial condition, and results of operations32% rewritten
  6. 38We may not accurately estimate the impact on our business of developing, introducing, and updating new and existing products and services
  7. 39We may need to record write-downs from future impairments of identified intangible assets and goodwill21% rewritten
  8. 40Integration of our acquisitions may not be successful, and we may not realize the synergies anticipated from our acquisitions40% rewritten
  9. 41Our substantial debt could limit our ability to fund operations, expose us to interest rate volatility, limit our ability to raise additional capital, and have a material adverse effect on our ability to fulfill our obligations under our Credit Agreement and Indenture and to our Network Partners, Clients, and members
  10. 42The Indenture and the Credit Agreement contain covenants that impose significant operational and financial restrictions on us, and the failure to comply with these covenants would result in an event of default under these instruments
  11. 43Provisions in our charter documents and under Delaware law could discourage a takeover that stockholders may consider favorable
  12. 44The exclusive forum provision in our amended and restated certificate of incorporation could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or team members

Other Healthequity 10-Ks

  • FY2025 10-K risk factors
    46 risks

    Substantially all revenue depends on tax-advantaged health savings accounts and consumer-directed benefits. Growth relies heavily on depository partners, payment card interchange fees, and acquisitions. Extensive regulation spans healthcare, tax, banking, and data privacy laws.

    Filed Mar 18, 2025

About this page

The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.