Item 1.Business
Overview of the Company
General
We are the nation’s largest owner and operator of inpatient rehabilitation hospitals in terms of patients treated, revenues, and number of hospitals. We provide specialized rehabilitative treatment, using advanced technology and intensive therapy, on an inpatient basis for patients recovering from a major injury or illness and seeking to regain functional ability, independence and quality of life. We operate hospitals in 39 states and Puerto Rico, with concentrations in Florida and Texas. As of December 31, 2025, we operated 173 inpatient rehabilitation hospitals. We are committed to delivering high-quality, cost-effective patient care. For 2025, we were named America’s Most Awarded Leader in Inpatient Rehabilitation by Newsweek and Statista and ranked among Fortune’s World’s Most Admired Companies™ and Forbes’ Most Trusted Companies in America.
Our common stock is traded on the New York Stock Exchange (symbol “EHC”). Our principal executive offices are located at 9001 Liberty Parkway, Birmingham, Alabama 35242, and the telephone number of the principal executive offices is (205) 967-7116. Our website address is www.encompasshealth.com.
In addition to the discussion here, we encourage the reader to review Item 1A, Risk Factors, Item 2, Properties, and Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, which highlight additional considerations about our Company.
The table below provides selected operating and financial data.
| | | | | | | | | | | | | | | | | |
| As of or for the Year Ended December 31, |
| 2025 | | 2024 | | 2023 |
| Consolidated data: | (Actual Amounts) |
| Inpatient rehabilitation: | | | | | |
| Number of hospitals | 173 | | 166 | | 161 |
| Discharges | 263,299 | | 248,498 | | 229,480 |
| Number of licensed beds | 11,465 | | 11,094 | | 10,778 |
| | | | | |
| Net operating revenues: | | (In Millions) | |
| Inpatient | $ | 5,756.3 | | | $ | 5,230.5 | | | $ | 4,693.8 | |
| Other | 178.9 | | | 142.7 | | | 107.4 | |
| Total | $ | 5,935.2 | | | $ | 5,373.2 | | | $ | 4,801.2 | |
Our inpatient rehabilitation hospitals offer specialized rehabilitative care across an array of diagnoses and deliver comprehensive, high-quality, cost-effective patient care services. As participants in the Medicare program, our hospitals must be licensed and certified and otherwise comply with various requirements that are discussed below in the “Sources of Revenues—Medicare Reimbursement” section. Substantially all (92%) of the patients we serve are admitted from acute-care hospitals following physician referrals for specific acute inpatient rehabilitative care. Most of those patients have experienced significant physical or cognitive disabilities or injuries due to medical conditions, such as strokes, hip fractures, and a variety of debilitating neurological conditions, that are generally nondiscretionary in nature and require rehabilitative healthcare services in a facility-based setting. Our teams of highly skilled nurses and physical, occupational, and speech therapists utilize proven technology and clinical protocols with the objective of restoring our patients’ physical and cognitive abilities. Patient care is provided by nursing and therapy staff as directed by physician orders while case managers and other clinical staff monitor each patient’s progress and provide documentation and oversight of patient status, achievement of goals, discharge planning, and functional outcomes. Our hospitals provide a comprehensive interdisciplinary clinical approach to treatment that leverages innovative technologies and advanced therapies and achieves superior outcomes.
Strategy and Strategic Priorities
Our strategy is to expand our network of inpatient rehabilitation hospitals, add capacity to existing hospitals, further strengthen our relationships with healthcare systems, provider networks, and payors in order to connect patient care across the healthcare continuum, and to deliver superior patient outcomes in a cost-effective manner. We believe this strategy, along with
our demonstrated ability to adapt to changes in healthcare, positions us for success in the evolving healthcare delivery system. In pursuit of our strategy, we established the following priorities.
•Growth. We actively pursue capacity expansions through the development of new inpatient rehabilitation hospitals and additions to existing hospitals each year. In addition, our same store hospitals have other organic growth opportunities, including secular shifts in aging demographic populations, the ability to capture market share, and the maturation of newly opened locations.
•Operational Initiatives. Our priorities include operational initiatives that build on momentum from recent years and further our goal of superior patient outcomes. We have pursued and will continue to pursue initiatives to lower our rate of transfers to acute-care hospitals, improve our rate of discharges to community, and improve the patient experience.
We will continue to demonstrate our value proposition to Medicare Advantage payors by providing superior patient outcomes, including higher discharge to community rates and lower lengths of stay, compared to alternative sites of care. We believe our outcomes and quality of care data have helped drive significant improvement in the payments we receive from Medicare Advantage payors.
Given the significant number of stroke patients in need of post-acute care, we will continue working to build our stroke market share. As of December 31, 2025, 148 of our 173 hospitals held stroke-specific certifications that required us to demonstrate effective use of evidence-based clinical practice guidelines to manage and optimize stroke care and an organized approach to performance measurement and evaluation of clinical outcomes.
We will continue to develop and implement post-acute solutions that allow us to apply our clinical expertise, large post-acute datasets, electronic medical record technologies, and strategic partnerships to drive improved patient outcomes and lower the cost of care across the entire post-acute episode. The evolution of artificial intelligence capabilities has the potential to amplify the impact and efficiency of these solutions.
We will seek to expand efforts and initiatives to recruit and retain a qualified clinical workforce. For additional discussion of some of these initiatives, see the “Human Capital Management” section below.
•Capital Structure. We seek to maintain balance sheet flexibility, consider opportunistic refinancings and augment returns from investments in operations with shareholder distributions via common stock dividends and repurchases of our common stock. Our debt portfolio is concentrated in long-dated fixed-rate debt. Our free cash flow is the primary source of funding for the considerable investment in our de novo and bed addition growth plans. As an additional source of liquidity, we can access our $1 billion revolving credit facility of which $824 million was available for borrowing as of December 31, 2025. Our strong balance sheet as well as our leverage and liquidity profiles mitigate exposure to interest rate volatility and near-term refinancing risks.
For additional discussion of our strategic priorities as well as progress toward our priorities in 2025, including operating results, growth, and shareholder distributions, and our business outlook, see Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, “Executive Overview,” “Results of Operations,” and “Liquidity and Capital Resources.”
Competitive Strengths
We believe we differentiate ourselves from our competitors based on, among other things, the quality of our clinical outcomes, our cost-effectiveness, our financial strength, and our extensive application of technology. We also believe our competitive strengths discussed below give us the ability to adapt and succeed in a healthcare industry facing regulatory uncertainty around attempts to improve outcomes and reduce costs.
•People. We believe our employees share a steadfast commitment to providing outstanding care to our patients. We undertake significant efforts to ensure our clinical and support staff receive the education and training necessary to provide the highest quality care in the most cost-effective manner. We embrace the Encompass Health Way, our core set of values developed through input from a broad cross section of our employees. The Encompass Health Way calls on each of our employees to set the standard, lead with empathy, do what’s right, focus on the positive, and ensure we are stronger together. We believe our culture is essential to attracting and retaining talent. For further discussion of our human capital management and our award-winning culture, see the section titled “Human Capital Management” below.
•Change Agility. We have a demonstrated ability to adapt in the face of numerous and significant regulatory, legislative, and operating environment changes. We believe our consistent and disciplined operating model allows us to be nimble and responsive to change as we have shown following a number of significant changes to our Medicare payment system.
•Strategic Relationships. We have a long and successful history of building strategic relationships with major healthcare systems. More than a third of our inpatient rehabilitation hospitals currently operate as joint ventures with acute-care hospitals or systems. Joint ventures with market leading acute-care hospitals establish a solid foundation for providing integrated patient care that can improve the quality of outcomes and reduce the total cost of care.
The post-acute innovation tools we have developed, and will continue to develop, support our strategic relationship initiatives by enhancing the effective and efficient management of patients across multiple post-acute care settings and facilitating high-quality patient care, improved care coordination, and network provider performance and cost management.
Additionally, we have a strategic sponsorship with the American Heart Association/American Stroke Association on a nationwide basis to increase patient independence after a stroke and reduce stroke mortality through community outreach and information campaigns.
•Clinical Expertise and High-Quality Outcomes. We have extensive clinical experience from which we have developed standardized best practices and protocols. We believe these clinical best practices and protocols, particularly as leveraged with our well-trained clinicians and industry-leading technology, help ensure the delivery of consistently high-quality healthcare services, reduced inefficiencies, and improved performance across a spectrum of operational areas. Currently, we operate 149 hospitals that hold one or more Joint Commission Disease-Specific Care Certifications, such as stroke rehabilitation, hip fracture rehabilitation, brain injury rehabilitation, amputee rehabilitation, Parkinson’s Disease rehabilitation, and spinal cord injury rehabilitation certification.
•Cost Effectiveness. Our scale, data-driven business practices, consistent and disciplined operating model, and culture help us provide healthcare services on a cost-effective basis. We leverage centralized administrative functions, use data analytics to identify trends and respond on a timely basis, and identify best practices and implement them across our platform of hospitals. Our de novo and bed addition strategies incorporate pre-fabrication construction technology to create efficiencies by reducing reliance on subcontractors, improving supply chain efficiencies, providing a consistent construction quality, and realizing a speed-to-market benefit.
•Financial Resources. We have a proven track record of generating strong cash flows from operations that have allowed us to successfully pursue our growth strategy, manage our financial leverage, and make complementary shareholder distributions. As of December 31, 2025, we have a strong, well-capitalized balance sheet, including ownership of approximately 79% of our hospital real estate, no significant debt maturities until 2028, and ample availability under our revolving credit facility, which along with the cash flows generated from operations should, we believe, provide sufficient support for our business strategy.
•Advanced Technology and Innovation. We are focused on developing technology-enabled strategies to further improve our effectiveness at providing post-acute healthcare. Our post-acute innovation strategy is based on using our clinical expertise, our large post-acute datasets, and our proven capabilities in enterprise-level electronic medical record technologies, data analytics, data integration, and predictive analytics to drive value-based performance for our patients, our partners, and our payors. We believe our information systems and post-acute innovation solutions, in addition to improving patient care and operating efficiencies, allow us to collect, analyze, and share information on a timely basis making us an ideal partner for other healthcare providers in a coordinated care delivery environment. Our systems also emphasize interoperability with referral sources and other providers coordinating care. We have devoted substantial resources, effort and expertise to leveraging technology to create post-acute solutions that improve patient care and operating efficiencies.
Competition
The inpatient rehabilitation industry, outside of our leading position, is highly fragmented. Our inpatient rehabilitation hospitals compete primarily with rehabilitation units, most of which are within acute-care hospitals, in the markets we serve. An acute-care hospital operating its own unit, particularly one owned or operated by a large public company or not-for-profit that has a dominant position in the local market, can be a formidable competitor because 92% of our patients come from acute-care
hospitals. There are several privately held companies offering post-acute rehabilitation services that compete with us in select geographic markets. In addition, there is a public company that is primarily focused on other post-acute care services but also operates 38 inpatient rehabilitation hospitals across the country. Other providers of post-acute care services compete for some rehabilitation patients. For example, nursing homes may market themselves as offering certain rehabilitation services, particularly to patients not in need of intensive rehabilitation therapy, even though those nursing homes are not required to offer the same level of care and are not licensed as hospitals. The competitive factors in any given market include the quality of care and service provided, the treatment outcomes achieved, the relationship and reputation with managed care and other private payors and the acute-care hospitals, physicians, or other referral sources in the market, and the regulatory barriers to entry in certificate of need states. The ability to work as part of an integrated delivery payment model with other providers, including the ability to deliver quality patient outcomes and cost-effective care, could become an increasingly important factor in competition if a significant number of people in a market are participants in one or more of these models. See the “Regulation—Relationships with Physicians and Other Providers” and “Regulation—Certificates of Need” sections below for further discussion of some of these factors. For a list of our inpatient rehabilitation markets by state, see the table in Item 2, Properties.
Patients and Demographic Trends
Demographic trends, such as population aging, should continue to increase long-term demand for the services we provide. While we treat patients of all ages, most of our patients are 65 and older, and the number of Medicare enrollees is expected to continue to grow for the foreseeable future. More specifically, the average age of our Medicare patients is approximately 77, and the population group of age 75 and over is expected to grow at approximately 4% per year through 2030. We believe the demand for the services we provide will continue to increase as the U.S. population ages. We believe these factors align with our strengths in, and focus on, inpatient rehabilitation services.
Despite the growing demand for inpatient rehabilitation services, the number of inpatient rehabilitation facilities (“IRFs”) has remained relatively stable — decreasing slightly from 1,179 in 2010 to 1,170 in 2024. This supply-demand imbalance is partly responsible for a relatively low conversion rate of inpatient rehabilitation eligible patients. Within our markets, we believe the percentage of patients who are discharged from acute-care hospitals with one or more of 13 specified medical conditions that The Centers for Medicare & Medicaid Services (“CMS”) ties to IRF eligibility and subsequently admitted to an IRF is approximately 15% based on Medicare fee-for-service data, which is the only publicly available data on the subject. To respond to the strong demand for our services, we continue to develop our current markets through bed additions and construct or acquire hospitals in new markets. Since 2012, we have opened or acquired 78 new hospitals and increased the number of licensed beds we operate by approximately 72%, or 4,809 beds.
Human Capital Management
Workforce Composition
As of December 31, 2025, we employed over 42,000 individuals. In the healthcare services sector, many professionals, such as nurses, desire flexible work arrangements. Accordingly, part-time and per diem employees represent a large percentage of our employee population. Except for 50 employees at one hospital (approximately 14% of that hospital’s workforce), none of our employees are represented by a labor union as of December 31, 2025. The chart below includes a breakdown of our employees.
| | | | | |
| Type | Employees |
| Full-time Employees | 24,611 |
| Part-time Employees | 3,322 |
| Pool/Per-diem Employees | 14,367 |
In some markets, the shortage of clinical personnel is a significant operating issue facing healthcare providers. Shortages of nurses and other clinical personnel, including therapists, may, from time to time, require us to increase use of more costly temporary personnel, which we refer to as “contract labor,” and other types of premium pay programs. To recruit and retain those clinical employees, we maintain a total rewards program that we view as a combination of the tangible components of pay and benefits with the intangible components of a culture that encourages learning, development, and a supportive work environment. We believe our outstanding employee engagement scores, discussed below, evidence that our human capital management efforts have been successful. We focus on the following strategic human capital imperatives:
•Emphasizing talent acquisition, development, and retention;
•Maintaining competitive compensation and benefit programs that reward and recognize employee performance; and
•Fostering a strong culture that values inclusion and diversity.
Emphasizing Talent Acquisition, Development, and Retention
Talent Acquisition
Our Company is focused on attracting and hiring qualified talent through a disciplined, enterprise-wide talent acquisition strategy and a streamlined recruitment process. Talent acquisition efforts are centrally coordinated and aligned to support the organization’s growth, operational needs, and long-term workforce sustainability across all markets.
Our recruitment model is organized across five primary areas: hospital leadership recruitment, regional hospital recruitment, de novo hospital openings, corporate recruitment, and talent attraction and recruitment marketing. This structure allows for both specialization and consistency, ensuring clinical and non-clinical roles are supported with dedicated expertise while maintaining standardized processes and compliance across the organization.
To strengthen the clinical hiring pipelines, we actively invest in national and local talent engagement efforts. We participate in multiple large, discipline-specific national conferences focused on the therapy and nursing professions. These conferences enhance our visibility among experienced clinicians, support employer brand awareness, and provide opportunities to engage with prospective candidates aligned with inpatient rehabilitative care delivery.
In addition to hiring experienced clinicians and professionals, we maintain a strong focus on early-career talent development. We actively recruit therapy and nursing students through structured relationships with academic institutions and training programs. These efforts include engagement with students completing clinical rotations and fieldwork at our hospitals, as well as outreach to local schools within the communities we serve. This approach allows candidates to gain exposure to inpatient rehabilitation while creating a sustainable pipeline of future clinical talent.
We maintain a dedicated recruitment team focused exclusively on staffing new hospital openings. For de novo hospitals, we utilize a centralized and repeatable talent attraction and hiring process, including coordinated marketing across multiple digital media channels and close collaboration with hospital leadership teams. This approach supports timely hiring, onboarding, and workforce readiness in advance of opening timelines and has been successfully deployed across multiple new hospital launches.
This year, we expanded our corporate relationships with universities to include schools outside of the state of Alabama. We hosted the Florida A&M School of Allied Health Sciences Research Day Reception which allowed us to connect with over 100 physical therapy and occupational therapy students and career professionals. Through these combined strategies, our talent acquisition function supports operational excellence, growth initiatives, and workforce stability while reinforcing our commitment to attracting and developing high-quality talent across the organization.
Training and Development
We support the long-term career aspirations of our employees through education and personal development.
•Education Opportunities. We offer our nurses an opportunity to advance their academic degrees at a reduced tuition rate of 30% to 50% of the total program cost. Educational webinars and system-wide group starts are offered to promote participation. Additionally, our full-time inpatient nursing and therapy staff have unlimited access to online education and training to ensure continuing education units are available at no cost.
•Tuition Reimbursement/Scholarship Programs. Employees also have the opportunity to advance their education through our tuition reimbursement and scholarship programs. We reimbursed over $4.6 million in tuition and paid over $1.1 million toward employees’ student loan debt in 2025.
•Academic Endowments. We fund several scholarships for deserving students pursuing degrees in nursing and allied health fields.
•Therapy Grants. We fund research projects to investigate the impact and effectiveness of therapy in the inpatient rehabilitation setting. In recent years, we have funded studies and research on topics ranging from caregiver education to the effectiveness of occupation-centered interventions. The program is open to qualified candidates, including employees.
•Other Employee Development Programs:
–career ladders, discussed further below, that offer paths to develop, demonstrate, and be rewarded for expanded responsibility in nursing, therapy, case management, and information technology support;
–national certification program that provides preparation courses, test reimbursement, and additional compensation for nurses who obtain the certified rehabilitation registered nurse certification through the American Nurses Credentialing Center;
–nurse leadership academy workshops offered for mid-level nursing leadership positions to grow and empower the next generation of nursing leaders;
–online development library that provides access to a wide range of readily available internal and external content on many topics important for success in current or desired jobs;
–developing future leaders program that develops nurses and therapists for supervisory positions and develops nurse and therapy supervisors for higher level positions;
–leadership precepting that provides new leaders 6-12 months of structured mentoring from experienced, high-performing peers;
–leadership coaching that provides six months of executive coaching to high performing leaders; and
–developing future CEO program that provides 18-24 months of intensive on-the-job experience to develop participants for future hospital chief executive officer openings; and
–executive mentorship program that offers structured executive mentorship opportunities to support leadership development, knowledge sharing, and employee engagement and to strengthen leadership capability, reinforce organizational values, and support retention through professional growth and development.
To further aid in employee development, we have invested in best-in-class technology to offer on-demand learning and development programs.
Retention
We track and measure therapist and nurse turnover for our full-time employees on a quarterly and annual basis to identify significant trends and outliers, but we do not believe comparisons of our data to external turnover benchmarks are a valid representation, as they do not account for the variations in survey data across markets, hospital sizes, practice settings, and practice specialties. The table below shows those turnover rates for 2025 and 2024.
| | | | | | | | | | | |
| 2025 | | 2024 |
| Therapist | 7.8% | | 7.7% |
| Nurse | 20.2% | | 20.4% |
We support employee retention and foster long‑term professional growth through well‑defined career ladder programs for key roles, such as nurse and therapist, across the organization. These programs outline clear pathways for building skills, expanding responsibilities, and advancing internally. Employees who participate in these programs consistently demonstrate significantly higher retention rates, underscoring the value of structured development in sustaining a committed workforce. By investing in transparent growth opportunities, we promote higher employee engagement, support internal mobility, and cultivate a workforce of individuals who can grow with us over the course of their careers.
Succession Planning
We maintain succession plans for key leadership roles across the organization, including executive leadership positions. Our succession planning approach is designed to support leadership continuity and long-term organizational stability through regular talent reviews, assessment of leadership readiness, and identification of internal development opportunities. These efforts are supported by ongoing leadership development, targeted learning experiences, and executive-level oversight to ensure we are prepared to meet future leadership needs.
Maintaining Competitive Compensation and Benefits
Maintaining competitive compensation and benefit programs that reward and recognize employee performance furthers our goal to attract, retain, and motivate employees who will help us deliver high-quality patient care. We are also committed to providing comprehensive benefit options that will allow our employees and their families to live healthier and more secure lives. In our compensation and benefit programs:
•we provide employee wages that are competitive and consistent with employee positions, skill levels, experience, knowledge and geographic location;
•we engage nationally recognized outside compensation and benefits consulting firms to independently evaluate the effectiveness of our compensation and benefit programs, to provide benchmarking against our peers within the industry and by specific market, and to recommend design elements for those programs;
•we base annual increases and incentive compensation on merit, which is communicated to employees through our talent management process as part of our annual review procedures;
•all full-time and most part-time employees are eligible for health insurance (including mental health coverage), paid and unpaid leaves, a retirement plan, a wellness program, telemedicine, tuition reimbursement, an employee assistance program, and life and disability/accident coverage;
•we provide an employer match on retirement plan contributions;
•we also offer a wide variety of voluntary benefits that allow employees to select the options that meet their needs, including pre-paid legal services, dental insurance, vision insurance, hospital indemnity insurance, accident insurance, critical illness insurance, supplemental life insurance, disability insurance, health savings accounts, flexible spending accounts, auto/home insurance, and identity theft insurance;
•we have various year-long, quarterly, and short-term incentive plans for field leadership, most marketing/sales employees, and executives; and
•we make annual grants of restricted stock to employees at various levels, including non-executive management, to foster a strong sense of ownership and align the interests of management with those of our stockholders.
Fostering a Strong Culture
Inclusion and Cultural Education
For 2025, we focused on centralizing inclusion and cultural programming and providing education our employees need to care for our patients. Our cultural awareness programs are centered around quality and clinical excellence to ensure our employees are supported and trained to meet the culturally unique needs of our patients. As a result of this training and other initiatives, the organization improved on the employee engagement survey score relating to culturally competent patient care. This engagement measure is significant from a company perspective because we see a positive correlation around the question of “Our company equips me/staff with the resources to deliver Culturally Competent Care to our patients” and our net promotor score which measures patient satisfaction.
We believe training our managers and supervisors to lead diverse teams is another important component of ensuring our employees feel supported and valued. Our “People Managers” training series is a structured training program that allows our leaders to gain skills needed to navigate common workplace situations that have an impact on culture and engagement. The topics covered in over 90% of our hospitals in 2025 included managing change among cultural differences and navigating staff and patient conflicts related to courtesy and respect.
Employee Engagement
Employee engagement is a key driver of retention. We conduct an annual employee engagement survey open to all our employees, helping us to gauge employee satisfaction with and commitment to their jobs. In 2025, 85% of our eligible permanent employees participated in the survey, which measures perceptions based on 38 questions from the categories listed below. The overall Company engagement score was 84.2% favorable, representing a small increase over 2024. In 2025, we exceeded the healthcare benchmark in all of the 10 categories (by an average 12.1%):
| | | | | |
•ethics and compliance | •teamwork |
•culture of safety | •engagement |
•inclusion and diversity | •culture of trust |
•work environment | •individual value |
•leadership | •communication |
Furthermore, some hospitals participate in a 5-item pulse engagement survey mid-year to gain feedback on their engagement action plans. Pulse surveys allow us to target and achieve improved engagement scores at the hospital level.
Our shared values provide the foundation for how we engage, develop, and support employees across the organization. Those values are reinforced through leadership development, training, and ongoing communication and guide leadership expectations, collaboration, accountability, and a commitment to patient-centered care. Employee engagement surveys and pulse surveys are used as tools to assess alignment of employee experience with our shared values and to inform action planning at both the local and enterprise levels.
Regulatory and Reimbursement Challenges
Healthcare is a highly regulated industry facing many well-publicized regulatory and reimbursement challenges. The Medicare reimbursement system for inpatient rehabilitation has changed significantly over the years. The future of many aspects of healthcare regulation remains uncertain. Any regulatory or legislative changes impacting the healthcare industry ultimately may affect, among other things, reimbursement of healthcare providers, consumers’ access to coverage of health services, including among non-Medicare aged population segments within commercial insurance markets and Medicaid enrollees, and competition among providers. Changes may also affect the delivery of healthcare services to patients by providers and the regulatory compliance obligations associated with those services.
Successful healthcare providers are those able to adapt to changes in the regulatory and operating environments, build strategic relationships across the healthcare continuum, and consistently provide high-quality, cost-effective care. We believe we have the necessary capabilities—change agility, strategic relationships, quality of patient outcomes, cost effectiveness, and ability to capitalize on growth opportunities—to adapt to and succeed in a dynamic, highly regulated industry, and we have a proven track record of doing so. For more in-depth discussion of the primary challenges and risks related to our business, particularly the changes in Medicare reimbursement, increased compliance and enforcement burdens, and other changes to our operating environment resulting from healthcare regulatory changes, see “Sources of Revenues—Medicare Reimbursement” and “Regulation” below in this section as well as Item 1A, Risk Factors, and Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, “Executive Overview—Key Challenges.”
Sources of Revenues
We receive payment for patient care services from the federal government (primarily under the Medicare program), managed care plans and private insurers, and, to a considerably lesser degree, state governments (under their respective Medicaid or similar programs) and directly from patients. Revenues and receivables from Medicare are significant to our operations. Federal and state governments establish payment rates as described in more detail below. We negotiate the payment rates with non-governmental group purchasers of healthcare services that are included in “Managed care” in the table below, including private insurance companies, employers, health maintenance organizations (“HMOs”), preferred provider organizations (“PPOs”), and other managed care plans. Patients are generally not responsible for the difference between established gross charges and amounts reimbursed for such services under Medicare, Medicaid, and other private insurance plans, HMOs, or PPOs but are responsible to the extent of any exclusions, deductibles, copayments, or coinsurance features of their coverage. Medicare, through its Medicare Advantage program, offers Medicare-eligible individuals an opportunity to
participate in managed care plans. Revenues from Medicare and Medicare Advantage represent approximately 82% of total revenues.
The sources and relative mix of our revenues for the last three years are:
| | | | | | | | | | | | | | | | | |
| | For the Year Ended December 31, |
| | 2025 | | 2024 | | 2023 |
| Medicare | 65.4 | % | | 65.1 | % | | 65.0 | % |
| Medicare Advantage | 16.4 | % | | 16.8 | % | | 16.2 | % |
| Managed care | 10.7 | % | | 10.8 | % | | 11.1 | % |
| Medicaid | 3.1 | % | | 3.3 | % | | 4.0 | % |
| Other third-party payors | 0.7 | % | | 0.8 | % | | 0.9 | % |
| Workers' compensation | 0.5 | % | | 0.5 | % | | 0.5 | % |
| Patients | 0.3 | % | | 0.3 | % | | 0.3 | % |
| Other income | 2.9 | % | | 2.4 | % | | 2.0 | % |
Total | 100.0 | % | | 100.0 | % | | 100.0 | % |
Medicare Reimbursement
Medicare is a federal program that provides hospital and medical insurance benefits to persons aged 65 and over, qualified disabled persons, and persons with end-stage renal disease. Medicare, through statutes and regulations, establishes reimbursement methodologies and rates for various types of healthcare providers, facilities, and services. Each year, the Medicare Payment Advisory Commission (“MedPAC”), an independent agency that advises the United States Congress on issues affecting Medicare, makes payment policy recommendations to Congress for a variety of Medicare payment systems including, among others, the inpatient rehabilitation facility prospective payment system (the “IRF-PPS”). MedPAC also makes recommendations on regulatory actions to CMS. Neither Congress nor CMS is obligated to adopt MedPAC recommendations, and, based on outcomes in previous years, there can be no assurance either will adopt MedPAC’s recommendations in a given year. However, MedPAC’s recommendations have, and could in the future, become the basis for subsequent legislative or, as discussed below, regulatory action affecting us.
The Medicare statutes are subject to change from time to time. With respect to Medicare reimbursement, the Patient Protection and Affordable Care Act (the “ACA”) provided for specific reductions to healthcare providers’ annual market basket updates and other payment policy changes. In August 2011, President Obama signed into law the Budget Control Act of 2011 providing for an automatic 2% reduction, or “sequestration,” of Medicare program payments for all healthcare providers to reduce deficit spending. Sequestration took effect April 1, 2013 and, as a result of subsequent legislation, will continue through the first five months of fiscal year 2033 unless Congress and the President take further action. Additional Medicare payment reductions are also possible under the Statutory Pay-As-You-Go Act of 2010 (“Statutory PAYGO”). Statutory PAYGO requires, among other things, that mandatory spending and revenue legislation not increase the federal budget deficit over a 5- or 10-year period. If the Office of Management and Budget (the “OMB”) finds there is a deficit in the federal budget, Statutory PAYGO requires OMB to order sequestration of Medicare, which could result in Medicare program payments reductions of up to four percent. In the future, concerns about the federal deficit, national debt levels and the solvency of the Medicare trust fund could result in enactment of further federal spending reductions, further entitlement reform legislation affecting the Medicare program, or both. Healthcare will be the subject of significant regulatory and legislative changes regardless of the party in control of the executive and legislative branches of state and federal governments.
CMS regularly modifies Medicare regulations, including reimbursement methodologies and rates. In accordance with Medicare laws and statutes, CMS makes annual adjustments to Medicare payment rates for prospective payment systems, including the IRF-PPS, by what is commonly known as a “market basket update.” CMS may take other regulatory action affecting rates as well. For example, under the ACA, CMS requires IRFs to submit data on certain quality of care measures for the IRF quality reporting program. A facility’s failure to submit the required quality data results in a two percentage point reduction to that facility’s annual market basket increase factor for payments made for discharges in a subsequent Medicare fiscal year. IRFs began submitting quality data to CMS in October 2012. Subject to its statutory authority, CMS may also make non-rate changes to the prospective payment system. For example, CMS changed the IRF-PPS, effective October 1, 2019, to replace the FIM™ assessment instrument with new patient assessment measures, which we refer to as “Section GG functional measures” or “Section GG” based on the designation CMS assigned to them. Section GG affects patients’ classification into
case-mix groupings, relative weights, and length-of-stay values under the IRF-PPS, which in turn affect our reimbursement amounts. In some instances, CMS’s modifications can have a substantial impact on healthcare providers.
We cannot predict the adjustments to Medicare payment systems Congress or CMS may make in the future. Congress, MedPAC, and CMS will continue to address reimbursement rates for a variety of healthcare settings. Any additional downward adjustment to rates or limitations on reimbursement for the types of facilities we operate and services we provide could have a material adverse effect on our business, financial position, results of operations, and cash flows. For additional discussion of the risks associated with our concentration of revenues from the federal government or with potential changes to the statutes or regulations governing Medicare reimbursement, see Item 1A, Risk Factors, “Reimbursement Risks” and “Other Regulatory Risks” and Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, “Executive Overview—Key Challenges.”
Although reductions or changes in reimbursement from governmental or third-party payors and regulatory changes affecting our business represent one of the most significant challenges to our business, our operations are also affected by other rules and regulations that indirectly affect reimbursement for our services, such as data coding rules and patient coverage rules and determinations. For example, Medicare providers like us can be negatively affected by the adoption of coverage policies, either at the national or local level, that determine whether an item or service is covered and under what clinical circumstances it is considered to be reasonable and necessary. Current CMS coverage rules require inpatient rehabilitation services to be ordered by a physician and coordinated by an interdisciplinary team and the admission to the IRF must be reviewed and approved by a specialized rehabilitation physician. The interdisciplinary team must meet weekly to review patient status and make any needed adjustments to the individualized plan of care. Qualified personnel must provide the rehabilitation nursing, physical therapy, occupational therapy, speech-language pathology, social services, psychological services, and prosthetic and orthotic services that may be needed. Medicare contractors processing claims for CMS make coverage determinations regarding medical necessity that can represent novel, restrictive, or incorrect interpretations of the CMS coverage rules. Those interpretations are not made through a notice and comment review process. We cannot predict how future CMS coverage rule interpretations or any new local coverage determinations will affect us. However, more restrictive coverage interpretations can limit or delay our reimbursement for services provided to potentially large pools of patients with similar medical conditions.
In the ordinary course, Medicare reimbursement claims made by healthcare providers, including inpatient rehabilitation hospitals, are subject to audit by governmental payors and their agents, such as the Medicare Administrative Contractors (“MACs”) that act as fiscal intermediaries for all Medicare billings, as well as the United States Department of Health and Human Services Office of Inspector General (the “HHS-OIG”), CMS, and state Medicaid programs. In addition to those audits conducted by existing MACs, CMS has developed and instituted various Medicare audit programs under which CMS contracts with private companies to conduct claims and medical record audits. Some contractors are paid a percentage of the overpayments recovered. Recovery Audit Contractors (“RACs”) conduct payment reviews of claims, which can examine coding, overall billing accuracy, and medical necessity. When conducting an audit, the RACs receive claims data directly from MACs on a monthly or quarterly basis.
CMS has also established Unified Program Integrity Contractors (“UPICs”) to perform fraud, waste, and abuse detection, deterrence and prevention activities for Medicare and Medicaid claims. Like the RACs, the UPICs conduct audits and have the ability to refer matters to the HHS-OIG or the United States Department of Justice (“DOJ”). Unlike RACs, UPICs do not receive a specific financial incentive based on the amount of the payment errors they identify.
As a matter of course, we undertake significant efforts through training, education, and documentation to ensure compliance with coding and medical necessity coverage rules. Despite our efforts to ensure accurate coding and assessment of patients, past audits have led, and future audits may lead, to assertions that we have been underpaid or overpaid by Medicare or that we have submitted improper claims in some instances. Ultimately, audits may require us to refund any amounts determined to have been overpaid. Audits also require us to incur additional costs to respond to requests for records and defend the validity of payments and claims. We cannot predict when or how these audit programs will affect us. Any denial of a claim for payment, either as a result of an audit or ordinary course payment review by the MAC, is subject to an appeals process that can take years to complete. For additional discussion of these audits and the risks associated with them, see Item 1A, Risk Factors, “Reimbursement Risks” and “Other Regulatory Risks” and Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, “Executive Overview—Key Challenges.”
As noted above, our inpatient rehabilitation hospitals receive a fixed payment reimbursement amount per discharge under the IRF-PPS based on the patient’s rehabilitation impairment category and other characteristics and conditions identified by the attending clinicians. To qualify for reimbursement under the IRF-PPS, our hospitals must comply with various Medicare rules and regulations including documentation and coverage requirements, or specifications as to what conditions must be met to qualify for reimbursement. These requirements relate to, among other things, pre-admission screening and individual treatment planning, which delineate the role of physicians in ordering and overseeing patient care. For example, physicians must approve patient admissions and, in doing so, determine that the treatment of the patients in an IRF setting is reasonable and medically necessary. A rehabilitation physician must then conduct face-to-face visits with the patients at least three days per week throughout the IRF stay. Also, patients admitted to IRFs must be able to tolerate a minimum of three hours of therapy per day for five days per week, and IRFs must have a registered nurse available 24 hours, each day of the week.
In addition, to qualify as an IRF under Medicare rules, a facility must be primarily focused on treating patients with one of 13 specified medical conditions that typically require intensive therapy and supervision, such as stroke, brain injury, hip fracture, certain neurological conditions, and spinal cord injury. Specifically, at least 60% of a facility’s patients must have a diagnosis or qualifying comorbidity from at least one of these 13 conditions, which requirement is known as the “60% Rule.” If an IRF does not demonstrate compliance with the 60% Rule by either the presumptive method or through a review of medical records, then its classification as an IRF may be terminated by CMS causing the facility to be paid under the acute-care payment system which would result in reduced total reimbursement per patient. If some of our hospitals fail to demonstrate compliance with the 60% Rule and CMS re-classifies them as acute-care hospitals, our revenue and profitability may be materially and adversely affected.
Under the IRF-PPS, CMS is required to adjust the payment rates based on an IRF-specific market basket index. The annual market basket update is designed to reflect changes over time in the prices of a mix of goods and services used by IRFs. In setting annual market basket updates, CMS uses data furnished by the Bureau of Labor Statistics for price proxy purposes, primarily in three categories: Producer Price Indexes, Consumer Price Indexes, and Employment Cost Indexes. With IRF-PPS, our inpatient rehabilitation hospitals retain the difference, if any, between the fixed payment from Medicare and their operating costs. Accordingly, our hospitals benefit from being cost-effective providers.
On July 31, 2024, CMS released its notice of final rulemaking for fiscal year 2025 IRF-PPS (the “2025 IRF Rule”). The 2025 IRF Rule implemented a net 3.0% market basket increase (market basket update of 3.5% reduced by a productivity adjustment of 0.5%) effective for discharges between October 1, 2024 and September 30, 2025. The 2025 IRF Rule also included changes that impacted our hospital-by-hospital base rate for Medicare reimbursement. Such changes included, but were not limited to, revisions to the wage index and labor-related share values, updates to outlier payments, and updates to the case-mix group relative weights and average lengths of stay values.
On August 1, 2025, CMS released its notice of final rulemaking for fiscal year 2026 IRF-PPS (the “2026 IRF Rule”). The 2026 IRF Rule implemented a net 2.6% market basket increase (market basket update of 3.3% reduced by a productivity adjustment of 0.7%) effective for discharges between October 1, 2025 and September 30, 2026. The 2026 IRF Rule also includes changes that impact our hospital-by-hospital base rate for Medicare reimbursement. Such changes include, but are not limited to, revisions to the wage index, updates to outlier payments, and updates to the case-mix group relative weights and average lengths of stay values. Based on our analysis which utilizes the acuity of our patients annualized over the twelve-month period ended June 30, 2025, our experience with outlier payments over that same time frame, and other factors, we believe the 2026 IRF Rule will result in a net increase to our Medicare payment rates of approximately 2.9% effective October 1, 2025.
Unlike our inpatient services, our outpatient services are primarily reimbursed under the Medicare Part B physician fee schedule. On October 31, 2025, CMS released its final notice of rulemaking for the payment policies under the physician fee schedule and other revisions to Part B policies for calendar year 2025. The updates to the fee schedule are not expected to be material to us.
For additional discussion of the Medicare payment rules and other regulatory and legislative initiatives affecting Medicare reimbursement that could impact our businesses, see Item 1A, Risk Factors, “Reimbursement Risks” and “Other Regulatory Risks” and Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, “Executive Overview—Key Challenges.”
Medicare Advantage, Managed Care and Other Discount Plans
We negotiate payment rates with certain large group purchasers of healthcare services, including Medicare Advantage plans, managed care plans, private insurance companies, and third-party administrators. Managed care contracts typically have terms between one and three years, although we have a number of managed care contracts that automatically renew each year (with pre-defined rate increases) unless a party elects to terminate the contract. In 2025, typical rate increases for our contracts
ranged from 2-4%. We cannot provide any assurance we will continue to receive increases in the future. Our managed care staff focuses on establishing and re-negotiating contracts that provide equitable reimbursement for the services provided.
As the percentage of Medicare-eligible beneficiaries choosing Medicare Advantage over traditional Medicare has grown, we have seen the percentage of our revenue derived from Medicare Advantage payors grow. In 2025, approximately 54% of Medicare beneficiaries enrolled in Medicare Advantage plans. This percentage has steadily increased over time since 2003. The Congressional Budget Office projects that the share of all Medicare beneficiaries enrolled in Medicare Advantage plans will rise to about 64% by 2034. We expect the percentage of our total revenues attributable to Medicare Advantage plans to continue to grow over time as well. Typically, Medicare Advantage and other managed care plans reimburse us less than traditional Medicare for the same type of care and patient, but that differential has been shrinking in recent years.
Medicaid Reimbursement
Medicaid is a jointly administered and funded federal and state program that provides hospital and medical benefits to qualifying individuals who are deemed unable to afford healthcare. As the Medicaid program is administered by the individual states under the oversight of CMS in accordance with certain regulatory and statutory guidelines, there are substantial differences in reimbursement methodologies and coverage policies from state to state. Some states pay providers additional amounts to supplement Medicaid reimbursement related to the care of individual Medicaid beneficiaries. These additional payments, which vary by state, may be in the form of directed payments made through Medicaid managed care plans or other supplemental payment programs. Some states impose provider taxes in the form of licensing fees, assessments, or other mandatory payments related to the provision of healthcare services in those states, which are used to fund a portion of the non-federal share of payments to providers. We record state directed and supplemental payments in the other component of Net operating revenues and provider tax expenses in Other operating expenses.
State Medicaid programs are subject to various federal regulations governing any provider tax and related directed and supplemental payment programs. In May 2024, CMS issued a final rule related to Medicaid managed care programs that addressed state directed payment programs and imposed new requirements for these programs. The various elements of the rule take effect between its issuance and early 2028. Ultimately, this rule could result in significant changes to state directed and supplemental payment programs from which we receive payments. However, a federal district court recently vacated portions of this rule following a legal challenge by the state of Texas. CMS appealed the decision, but the court enjoined enforcement of this rule while the appeal is pending.
On July 4, 2025, President Trump signed into law the One Big Beautiful Bill Act (“OBBBA”). The OBBBA contains a range of healthcare-related provisions impacting coverage, financing, and provider reimbursement in state Medicaid programs. These provisions include enrollee work requirements, limitations on states’ ability to assess provider taxes to increase federal matching Medicaid funds, and limitations on states’ directed payments to providers. Most of these provisions take effect in 2027 or later and likely require additional federal and state regulatory action to implement.
It is possible that additional rulemaking could result in significant restructurings of existing state Medicaid programs, including provider tax and related directed and supplemental payment programs. State authorities design the structures and operations of these programs to promote access to acute-care hospitals for Medicaid patients by supplementing acute-care reimbursement. Historically, we are not aware of any IRFs playing a role in the design given the limited number of IRF Medicaid patients, so we are uncertain what attention state authorities will give to the effects of additional rulemaking on IRFs. We are unable to estimate the financial impact that structural modifications and other program changes, if any, may have on our Medicaid provider tax expenses or directed and supplemental payments. CMS periodically assesses the compliance of these programs, and CMS’s determination that a state’s program fails to comply may result in a decrease in state directed and supplemental payments and recoupment of prior payments under that state’s noncompliant program.
Historically, states experiencing shortfalls in their Medicaid budgets have implemented cuts in Medicaid reimbursement rates. Additionally, certain states control Medicaid expenditures by restricting or eliminating coverage of some services. On average, our reimbursement per discharge from Medicaid is lower than that from traditional Medicare, Medicare Advantage and other managed care payors. For the year ended December 31, 2025, Medicaid payments for specific discharges represented only 3.1% of our consolidated Net operating revenues, and Medicaid discharges represented 5.4% of our total inpatient discharges. For additional discussion of risks associated with Medicaid, see Item 1A, Risk Factors, “Reimbursement Risks.”
Cost Reports
Because of our participation in Medicare and Medicaid, we are required to meet certain financial reporting requirements. Federal and, where applicable, state regulations require the submission of annual cost reports covering the revenue, costs, and expenses associated with the services provided by healthcare providers to Medicare beneficiaries and Medicaid recipients. These annual cost reports are subject to routine audits which may result in adjustments to the amounts ultimately determined to be due to us under these reimbursement programs. These audits are used to determine if any under- or over-payments were made by these programs and to set payment levels for future years. Medicare also makes retroactive adjustments to payments for certain low-income patients after comparing subsequently published statistical data from CMS to the cost report data. We cannot predict what retroactive adjustments, if any, will be made, but we do not anticipate these adjustments will have a material impact on us.
Regulation
The healthcare industry is subject to significant federal, state, and local regulation that affects our business activities by controlling the reimbursement we receive for services provided, requiring licensure or certification of our operations, regulating our relationships with physicians and other referral sources, regulating the use of our properties, and controlling our growth. State and local healthcare regulation may cover additional matters such as nurse staffing ratios, healthcare worker safety, disclosure of charges for services provided, marijuana legalization, and assisted suicide. We are also subject to broader federal and state regulations that prohibit fraud and abuse in the delivery of healthcare services. Congress, HHS-OIG, and the DOJ have historically focused on fraud and abuse in healthcare. Since the 1980s, a steady stream of changes have stiffened criminal and civil penalties or made it easier for the DOJ to impose liability on companies and individuals. As a healthcare provider, we are subject to periodic audits, examinations and investigations conducted by, or at the direction of, government investigative and oversight agencies. Failure to comply with applicable federal and state healthcare regulations can result in a provider’s exclusion from participation in government reimbursement programs as well as subject a provider to substantial civil and criminal penalties.
We undertake significant effort and expense to provide the medical, nursing, therapy, and ancillary services required to comply with local, state, and federal regulations as well as applicable accreditation standards, which for most of our hospitals are those of The Joint Commission. Accredited hospitals are subject to periodic resurvey to ensure the standards are being met.
Beyond healthcare specific regulations, we face increasing state and local regulation in areas, such as labor and employment, energy efficiency, and data privacy. In addition to the risk and burden of new, additional, or more stringent regulatory standards, these state and local regulations often conflict with federal regulation, and with each other. Given the number of locations in which we operate, increasing state and local regulation, which may be more stringent than federal regulation and may even conflict with federal or other state or local regulation, represents a significant burden and risk to us.
We maintain a comprehensive ethics and compliance program to promote conduct and business practices that meet or exceed requirements under laws, regulations, and industry standards. The program monitors the Company’s performance on, and raises awareness of, various regulatory requirements among employees and emphasizes the importance of complying with governmental laws and regulations. As part of the compliance program, we provide annual compliance training to our employees, Board members, medical directors, vendors, and other non-employees that operate within our hospitals. We require all employees to report any violations to their supervisor or another person of authority or through a toll-free telephone hotline. Another integral part of our compliance program is a policy of non-retaliation against employees who report compliance concerns.
Licensure and Certification
Healthcare facility construction and operation are subject to numerous federal, state, and local regulations relating to, among other things, the adequacy of medical care, equipment, personnel, operating policies and procedures, acquisition and dispensing of pharmaceuticals and controlled substances, infection control, maintenance of adequate records and patient privacy, fire prevention, and compliance with building codes and environmental protection laws. Our inpatient rehabilitation hospitals are subject to periodic inspection and other reviews by governmental and non-governmental certification authorities to ensure continued compliance with the various standards necessary for facility licensure. All of our hospitals are required to be licensed.
In addition, inpatient rehabilitation hospitals must be certified by CMS to participate in the Medicare program and generally must be certified by state Medicaid agencies to participate in Medicaid programs. Certification and participation in these programs involve numerous regulatory obligations. For example, hospitals must treat at least 20 patients without reimbursement prior to certification and eligibility for Medicare reimbursement. Once certified by Medicare, hospitals undergo
periodic on-site surveys and revalidations in order to maintain their certification. All of our inpatient hospitals participate in the Medicare program.
Failure to comply with applicable certification requirements may make our hospitals ineligible for Medicare or Medicaid reimbursement. In addition, Medicare or Medicaid may seek retroactive reimbursement from noncompliant hospitals or otherwise impose sanctions for noncompliance. Non-governmental payors often have the right to terminate provider contracts if the provider loses its Medicare or Medicaid certification.
All Medicare providers are subject to employee screening requirements and associated fees. The screening of employees with patient access must include a licensure check and may include other procedures such as fingerprinting, criminal background checks, unscheduled and unannounced site visits, database checks, and other screening procedures prescribed by CMS. If a healthcare provider arranges or contracts with an individual or entity who is excluded by HHS-OIG from participation in a federal healthcare program, the provider may be subject to civil monetary penalties if the excluded person renders services reimbursed, directly or indirectly, by a program.
We have developed operational systems to facilitate compliance with the various standards and requirements of the Medicare program and have established ongoing quality assurance activities; however, given the complex nature of governmental healthcare regulations, there can be no assurance Medicare, Medicaid, or other regulatory authorities will not allege instances of noncompliance. A determination by a regulatory authority that a hospital is not in compliance with applicable requirements could also lead to the assessment of fines or other penalties, loss of licensure, exclusion from participation in Medicare and Medicaid, and the imposition of requirements that the offending hospital must take corrective action.
Certificates of Need
In some states and U.S. territories where we operate, the construction or expansion of facilities, the acquisition of existing facilities, or the introduction of new beds or inpatient services may be subject to review by and prior approval of state regulatory bodies under a “certificate of need,” or “CON,” law. As of December 31, 2025, approximately 36% of our licensed beds are in states or U.S. territories that have CON laws. CON laws require a reviewing authority or agency to determine the public need for additional or expanded healthcare facilities and services. These laws also generally require approvals for capital expenditures involving inpatient rehabilitation hospitals if such capital expenditures exceed certain thresholds. In addition, CON laws in some states require us to abide by certain charity care commitments as a condition for approving a CON. Where we are subject to a CON law, we must obtain the CON before acquiring, opening, reclassifying, or expanding a healthcare facility or starting a new healthcare program.
We potentially face opposition any time we initiate a project requiring a new or amended CON or seek to acquire an existing CON. This opposition may arise either from competing national or regional companies or from local hospitals or other providers which file competing applications or oppose the proposed CON project. Opposition to our applications may delay or prevent our future addition of beds or hospitals in given markets or increase our costs in seeking those additions. The necessity for these approvals serves as a barrier to entry and has the potential to limit competition for us (in markets where we hold a CON) and for other providers (in markets where we are seeking a CON). We have generally been successful in obtaining CONs or similar approvals, although there can be no assurance we will achieve similar success in the future, and the likelihood of success varies by locality and state.
In an attempt to reduce regulation and increase competition, lawmakers in several states have recently proposed modification or even full repeal of CON laws. In 2019, Florida enacted legislation to repeal CON laws for several provider types, including IRFs. Similarly, in 2023, South Carolina enacted legislation to repeal CON laws for several provider types, including IRFs. We believe CON-related legislation and regulation changes, including both repeal and expansion of CON requirements, will continue to be proposed in various states for the foreseeable future.
False Claims
The federal False Claims Act (the “FCA”) imposes liability for the knowing presentation of a false claim to the United States government and provides for penalties equal to three times the actual amount of any overpayments plus up to approximately $28,000 per claim. Federal civil penalties will be adjusted to account for inflation each year. In addition, the FCA allows private persons, known as “relators,” to file complaints under seal and provides a period of time for the government to investigate such complaints and determine whether to intervene in them and take over the handling of all or part of such complaints. The FCA allows relators to share in monetary recoveries in order to incentivize complaints. The government and relators may also allege violations of the FCA for the knowing and improper failure to report and refund amounts owed to the government in a timely manner following identification of an overpayment. This is known as a “reverse false claim.” The
government deems identification of the overpayment to occur when a person has, or should have through reasonable diligence, determined that an overpayment was received and quantified the overpayment.
Because we have hundreds of thousands of claims a year for which we are reimbursed by Medicare and other federal payors and there is a relatively long statute of limitations, a billing error, cost reporting error or disagreement over physician medical judgment could result in significant damages and civil and criminal penalties under the FCA. Many states have also adopted similar laws relating to state government payments for healthcare services. The ACA amended the FCA to expand the definition of false claim, to make it easier for the government to initiate and conduct investigations, to enhance the monetary reward to relators where prosecutions are ultimately successful, and to extend the statute of limitations on claims by the government. The federal government and individual relators have become increasingly aggressive in asserting that incidents of erroneous billing or record keeping represent FCA violations and in challenging the medical judgment of independent physicians as the basis for FCA allegations. In addition, the federal government has increasingly asserted that violations of laws not directly related to Medicare billing, such as anti-kickback and anti-discrimination laws, may give rise to FCA claims. Furthermore, well-publicized enforcement actions indicate that the federal government has increasingly sought to use statistical sampling to extrapolate allegations to larger pools of claims or to infer liability without proving knowledge of falsity of individual claims. A violation of the FCA by us could have a material adverse effect upon our business, financial position, results of operations, or cash flows. Even the assertion of a violation could have an adverse effect upon our stock price or reputation. For additional discussion, see Item 1A, Risk Factors, “Reimbursement Risks” and “Other Regulatory Risks” and Note 16, Contingencies and Other Commitments, to the accompanying consolidated financial statements.
Relationships with Physicians and Other Providers
Anti-Kickback Law. Various state and federal laws regulate relationships between providers of healthcare services, including management or service contracts and investment relationships. Among the most important of these restrictions is a federal law prohibiting the offer, payment, solicitation, or receipt of remuneration by individuals or entities to induce referrals of patients for services reimbursed under the Medicare or Medicaid programs (the “Anti-Kickback Law”). The ACA amended the federal Anti-Kickback Law to provide that proving violations of this law does not require proving actual knowledge or specific intent to commit a violation. Another amendment made it clear that Anti-Kickback Law violations can be the basis for claims under the FCA. These changes and those described above related to the FCA, when combined with other recent federal initiatives, are likely to increase investigation and enforcement efforts in the healthcare industry generally. In addition to standard federal criminal and civil sanctions, including imprisonment and penalties of up to a $100,000 criminal fine and an approximately $128,000 civil penalty for each violation plus tripled damages for associated improper claims under the FCA, violators of the Anti-Kickback Law may be subject to exclusion from the Medicare and/or Medicaid programs. Federal civil penalties will be adjusted to account for inflation each year. HHS-OIG regulations itemize compensation arrangements that are not viewed as illegal remuneration under the Anti-Kickback Law. Those regulations provide for certain safe harbors for identified types of compensation arrangements that, if fully complied with, assure participants in the particular arrangement that HHS-OIG will not treat that participation as a criminal offense under the Anti-Kickback Law or as the basis for an exclusion from the Medicare and Medicaid programs or the imposition of civil sanctions.
On November 20, 2020, HHS-OIG finalized a rule to modernize the Anti-Kickback Law by reducing regulatory barriers to care coordination and accelerating adoption of value-based delivery and payment models (the “2020 AKL Rule”). The 2020 AKL Rule adds several new safe harbors for value-based arrangements and modifies several existing safe harbors with the goal of encouraging innovations that are beneficial to patients while maintaining necessary safeguards to protect against fraud and abuse. The 2020 AKL Rule also expands the safe harbor for cybersecurity technology by covering remuneration in the form of cybersecurity technology and services. The new and modified value-based safe harbors are available to inpatient rehabilitation providers if the applicable conditions are met.
Failure to fall within a safe harbor does not constitute a violation of the Anti-Kickback Law, but HHS-OIG has indicated failure to fall within a safe harbor may subject an arrangement to increased scrutiny. A violation of the Anti-Kickback Law by us or one or more of our joint ventures could have a material adverse effect upon our business, financial position, results of operations, or cash flows. Even the assertion of a violation could have an adverse effect upon our stock price or reputation.
We operate a number of our rehabilitation hospitals through joint ventures with institutional healthcare providers that may be in a position to make or influence referrals to us. In addition, we have a number of relationships with physicians and other healthcare providers, including management or service contracts. Some of these investment relationships and contractual relationships may not fall within the protection offered by a safe harbor. Despite our compliance and monitoring efforts, there can be no assurance violations of the Anti-Kickback Law will not be asserted in the future, nor can there be any assurance our defense against any such assertion would be successful.
For example, we have entered into agreements to manage our hospitals that are owned by joint ventures. Most of these agreements incorporate a percentage-based management fee. Although there is a safe harbor for personal services and management contracts, this safe harbor requires, among other things, the aggregate compensation paid to the manager over the term of the agreement be set in advance. Because our management fee may be based on a percentage of revenues, the fee arrangement may not meet this requirement. However, we believe our management arrangements satisfy the other requirements of the safe harbor for personal services and management contracts and comply with the Anti-Kickback Law.
Physician Self-Referral Law. The federal law commonly known as the “Stark law” and CMS regulations promulgated under the Stark law prohibit physicians from making referrals for “designated health services” including inpatient and outpatient hospital services, physical therapy, occupational therapy, radiology services, and home health services, to an entity in which the physician (or an immediate family member) has an investment interest or other financial relationship, subject to certain exceptions. The Stark law also prohibits those entities from filing claims or billing Medicare for those referred services. Violators of the Stark law and regulations may be subject to recoupments, civil monetary sanctions (up to approximately $32,000 for each violation and assessments up to three times the amount claimed for each prohibited service) and exclusion from any federal, state, or other governmental healthcare programs. The statute also provides a penalty of up to approximately $211,000 for a circumvention scheme. Federal civil penalties will be adjusted to account for inflation each year. There are statutory exceptions to the Stark law for many of the customary financial arrangements between physicians and providers, including personal services contracts and leases. However, in order to be afforded protection by a Stark law exception, the financial arrangement must comply with every requirement of the applicable exception.
On November 20, 2020, CMS finalized a rule implementing various changes to the Stark law to provide better access and outcomes for patients by creating clearer paths for providers to serve patients through enhanced coordinated care agreements (the “2020 Stark Rule”). Notably, the 2020 Stark Rule creates permanent exceptions for value-based compensation arrangements that provide at least one value-based activity, which arrangements must further one value-based purpose, which may include: (1) coordinating and managing patient care; (2) improving quality of care for a target population; (3) reducing costs or expenditure growth without reducing quality of care; and (4) transitioning from health care delivery and payment mechanisms that are based on volume to outcome-based delivery and payment systems. In addition, the 2020 Stark Rule adopts a new exception regarding the provision of cybersecurity items to physicians and makes permanent the electronic health record exception under the Stark law.
The complexity of the Stark law and the associated regulations and their associated strict liability provisions are a challenge for healthcare providers, who do not always have the benefit of significant regulatory or judicial interpretation of these laws and regulations. We attempt to structure our relationships to meet one or more exceptions to the Stark law, but the regulations implementing the exceptions are detailed and complex. Accordingly, we cannot assure that every relationship complies fully with the Stark law.
Additionally, no assurances can be given that any agency charged with enforcement of the Stark law and regulations might not assert a violation under the Stark law, nor can there be any assurance our defense against any such assertion would be successful or that new federal or state laws governing physician relationships, or new interpretations of existing laws governing such relationships, might not adversely affect relationships we have established with physicians or result in the imposition of penalties on us. A violation of the Stark law by us could have a material adverse effect upon our business, financial position, results of operations, or cash flows. Even the assertion of a violation could have an adverse effect upon our stock price or reputation.
HIPAA
The Health Insurance Portability and Accountability Act of 1996, commonly known as “HIPAA,” broadened the scope of certain fraud and abuse laws by adding several criminal provisions for healthcare fraud offenses that apply to all health benefit programs. HIPAA also added a prohibition against incentives intended to influence decisions by Medicare or Medicaid beneficiaries as to the provider from which they will receive services. In addition, HIPAA created new enforcement mechanisms to combat fraud and abuse, including the Medicare Integrity Program, and an incentive program under which individuals can receive a monetary reward for providing information on Medicare fraud and abuse that leads to the recovery of Medicare funds. Penalties for violations of HIPAA include civil and criminal monetary penalties. The United States Department of Health and Human Services Office of Civil Rights (“HHS-OCR”) implemented a permanent HIPAA audit program for healthcare providers nationwide in 2016. As of December 31, 2025, we have not been selected for audit.
HIPAA and related regulations contain certain administrative simplification provisions that require the use of uniform electronic data transmission standards for certain healthcare claims and payment transactions submitted or received electronically. HIPAA regulations also regulate the use and disclosure of individually identifiable health-related information, whether communicated electronically, on paper, or orally. The regulations provide patients with significant rights related to
understanding and controlling how their health information is used or disclosed and require healthcare providers to implement administrative, physical, and technical practices to protect the security of individually identifiable health information.
The Health Information Technology for Economic and Clinical Health (“HITECH”) Act modifies and expands the privacy and security requirements of HIPAA. The HITECH Act applies certain of the HIPAA privacy and security requirements directly to business associates of covered entities. The modifications to existing HIPAA requirements include: expanded accounting requirements for electronic health records, tighter restrictions on marketing and fundraising, and heightened penalties and enforcement associated with noncompliance. Significantly, the HITECH Act also establishes new mandatory federal requirements for notification of breaches of security involving protected health information. HHS-OCR rules implementing the HITECH Act expand the potential liability for a breach involving protected health information to cover some instances where a subcontractor is responsible for the breaches and that individual or entity was acting within the scope of delegated authority under the related contract or engagement. These rules generally define “breach” to mean the acquisition, access, use or disclosure of protected health information in a manner not permitted by the HIPAA privacy standards, which compromises the security or privacy of protected health information. Under these rules, improper acquisition, access, use, or disclosure is presumed to be a reportable breach, unless the potentially breaching party can demonstrate a low probability that protected health information has been compromised.
HHS-OCR is responsible for enforcing the requirement that covered entities notify the United States Department of Health and Human Services (“HHS”) and any individual whose protected health information has been improperly acquired, accessed, used, or disclosed. In certain cases, notice of a breach is required to be made to media outlets. The penalties for noncompliance may be up to approximately $73,000 per violation for most violations. In the event of violations due to willful neglect that are not corrected within 30 days, penalties start at approximately $73,000 per violation and are not subject to a per violation statutory maximum. Penalties are also subject to an annual cap of approximately $2,190,000 for multiple identical violations in a single calendar year depending on an entity’s level of culpability. Importantly, HHS-OCR has indicated that the failure to conduct a security risk assessment or adequately implement HIPAA compliance policies could qualify as willful neglect.
In addition, there are numerous legislative and regulatory initiatives at the federal and state levels addressing patient privacy concerns. Healthcare providers will continue to remain subject to many federal and state privacy-related laws, including but not limited to the California Consumer Privacy Act, that may be more restrictive than, or impose additional obligations beyond, the privacy regulations issued under HIPAA. These laws vary and could impose additional penalties. HHS-OIG and other regulators have also increasingly interpreted laws and regulations in a manner as to increase exposure of healthcare providers to allegations of noncompliance. Similarly, plaintiffs’ attorneys have taken expansive views of privacy laws and regulations to support private causes of action. Any actual or perceived violation of privacy-related laws and regulations, including HIPAA and the HITECH Act, could have a material adverse effect on our business, financial position, results of operations, and cash flows.
Civil Monetary Penalties Law
Under the Civil Monetary Penalties Law, HHS may impose substantial civil monetary penalties on healthcare providers for a wide variety of fraudulent and improper conduct, including presenting, or causing to be presented, ineligible reimbursement claims. In some instances, violations of this law may include treble damages for the amount of the reimbursement at issue and may include exclusion from federal health care programs such as Medicare and Medicaid. The penalties are adjusted annually to account for inflation. Sanctions under this law are in addition to the other statutory remedies discussed above.
Available Information
We make available through our website, www.encompasshealth.com, the following documents, free of charge: our annual reports (Form 10-K), our quarterly reports (Form 10-Q), our current reports (Form 8-K), and any amendments to those reports promptly after we electronically file such material with, or furnish it to, the United States Securities and Exchange Commission.
Item 1A.Risk Factors
Our business, operations, and financial position are subject to various risks. Some of these risks are described below, and the reader should take such risks into account in evaluating Encompass Health or any investment decision involving Encompass Health. This section does not describe all risks that may be applicable to us, our industry, or our business, and it is intended only as a summary of material risk factors. More detailed information concerning other risks and uncertainties as well as those described below is contained in other sections of this annual report. Still other risks and uncertainties we have not or cannot foresee as material to us may also adversely affect us in the future. If any of the risks below or other risks or uncertainties discussed elsewhere in this annual report are actually realized, our business and financial condition, results of operations, and cash flows could be adversely affected. In the event the impact is materially adverse, the trading price of our common stock could decline.
Reimbursement Risks
Reductions or changes in reimbursement from government or third-party payors could adversely affect our Net operating revenues and other operating results.
We derive a substantial portion of our Net operating revenues from the Medicare program. See Item 1, Business, “Sources of Revenues,” for a table identifying the sources and relative payor mix of our revenues. In addition to many ordinary course reimbursement rate changes that The Centers for Medicare & Medicaid Services (“CMS”) of the U.S. Department of Health and Human Services (“HHS”) adopts each year as part of its annual rulemaking process for various healthcare provider categories, Congress and some state legislatures have periodically proposed significant changes in laws and regulations governing the healthcare system. Many of these changes have resulted in limitations on the increases in and, in some cases, significant roll-backs or reductions in the levels of payments to healthcare providers for services under many government reimbursement programs. There can be no assurance that future governmental initiatives will not result in reimbursement freezes and reductions, or reimbursement increases that are less than the increases we experience in our costs of operation.
In March 2010, President Obama signed into law the Patient Protection and Affordable Care Act of 2010 (the “ACA”) as a significant healthcare reform. Many provisions within the ACA have impacted or could in the future impact our business, including Medicare reimbursement reductions and promotion of alternative payment models, such as accountable care organizations (“ACOs”) and bundled payment initiatives. The nature and substance of state and federal healthcare laws are subject to change frequently, by means of both broad-based healthcare reform legislation, like the ACA, and targeted legislative and regulatory action.
In accordance with federal statutes, CMS makes an annual adjustment to Medicare reimbursement rates, commonly known as a “market basket update,” by provider type in an effort to compensate providers for rising operating costs. The ACA requires the market basket updates for hospital providers to be reduced by a productivity adjustment on an annual basis. The productivity adjustment equals the trailing 10-year average of changes in annual economy-wide private nonfarm business multi-factor productivity. To date, the productivity adjustments have typically resulted in decreases to the market basket updates ranging from 20 to 100 basis points.
Other federal legislation can also have a significant impact on our Medicare reimbursement. For example, on August 2, 2011, President Obama signed into law the Budget Control Act of 2011, which provided for an automatic 2% reduction of Medicare program payments to reduce deficit spending. This automatic reduction, known as “sequestration,” began affecting payments received after April 1, 2013. Under current law, for each year through the first five months of fiscal year 2033, the reimbursement we receive from Medicare, after first taking into account all annual payment adjustments including the market basket update, will be reduced by sequestration unless it is repealed or modified before then. On July 4, 2025, President Trump signed into law the One Big Beautiful Bill Act (“OBBBA”). The OBBBA contains a range of healthcare-related provisions impacting coverage, financing, and provider reimbursement in state Medicaid programs. Most of these provisions take effect in 2027 or later and likely require additional federal and state regulatory action to implement.
Additional Medicare payment reductions are also possible under the Statutory Pay-As-You-Go Act of 2010 (“Statutory PAYGO”). Statutory PAYGO requires, among other things, that mandatory spending and revenue legislation not increase the federal budget deficit over a 5- or 10-year period. If the Office of Management and Budget (the “OMB”) finds there is a deficit in the federal budget, Statutory PAYGO requires OMB to order sequestration of government programs, including Medicare, which could result in Medicare program payments reductions of up to four percent.
Concerns held by federal policymakers about the federal deficit, national debt levels, or healthcare spending specifically, including solvency of the Medicare trust fund, could result in enactment of further federal spending reductions, including by means of significant staffing reductions at HHS, further entitlement reform legislation affecting the Medicare and
Medicaid programs, and further reductions to provider payments. In October 2014, President Obama signed into law the Improving Medicare Post-Acute Care Transformation Act of 2014 (the “IMPACT Act”). The IMPACT Act directs HHS, in consultation with healthcare stakeholders, to collect standardized data for post-acute quality and outcome measures. Although the IMPACT Act did not specifically call for the implementation of a new post-acute payment system, this act laid the foundation for possible future post-acute payment policies in which Medicare payments are driven primarily by patients’ medical conditions and other clinical factors rather than the costs of the setting where the care is provided. CMS has made changes to existing current post-acute payment systems to improve comparability of patient assessment and clinical characteristic data across settings, which could make it easier to develop payment system reforms for post-acute providers in the future. For example, in 2019, CMS implemented new patient assessment measures for the inpatient rehabilitation facility prospective payment system (the “IRF-PPS”) as discussed below. The IMPACT Act also created additional data reporting requirements for our hospitals in the domains of functional and cognitive status, skin integrity, medication reconciliation, incidence of major falls, and transfer of health information. The precise details of these new reporting requirements, including timing and content, were developed and implemented by CMS through the regulatory process over several years, and CMS may continue to make changes to these quality measures and standardized patient assessment data elements in the future. We cannot quantify the potential future effects, if any, of the IMPACT Act on us.
Each year, the Medicare Payment Advisory Commission (“MedPAC”), an independent agency, advises Congress on issues affecting Medicare and makes payment policy recommendations to Congress for a variety of Medicare payment systems including, among others, the IRF-PPS. MedPAC also provides comments to CMS on proposed rules, including the prospective payment system rules. Neither Congress nor CMS is obligated to adopt MedPAC recommendations, and, based on outcomes in previous years, there can be no assurance MedPAC’s recommendations will be adopted in a given year. However, MedPAC’s recommendations have, and could in the future, become the basis for legislative or regulatory action.
In connection with CMS’s final rulemaking for the IRF-PPS in each year since 2008, MedPAC has recommended either no updates to payments or reductions to payments. For example, at its January 2026 meeting, MedPAC approved recommending to Congress, among other things, legislative changes to reduce by 7% the base payment rate under IRF-PPS. MedPAC has also previously called on the HHS Secretary to conduct focused medical record reviews on IRFs.
In a June 2023 report mandated by the IMPACT Act, MedPAC reviewed the considerations associated with Congress designing and adopting a unified payment system for all Medicare post-acute care (a “PAC-PPS”) in lieu of separate systems for inpatient rehabilitation facilities (“IRFs”), skilled nursing facilities, long-term acute-care hospitals, and home health agencies. A PAC-PPS would reimburse providers for care based primarily on patients’ medical conditions and other clinical factors rather than the costs associated with care settings. MedPAC found a PAC-PPS to be feasible and desirable but also suggested policymakers may want to consider other “smaller scale site-neutral policies” given the considerable resources required to develop and implement a PAC-PPS. MedPAC previously estimated, although we cannot verify the methodology or the accuracy of that estimate, a PAC-PPS would result in a 15% reduction in IRF reimbursements and shift aggregate reimbursements from for-profit and freestanding IRFs to non-profit and hospital-based IRFs.
We cannot predict what alternative or additional deficit reduction initiatives, including significant staffing reductions at HHS, Medicare payment reductions, or post-acute care reforms, if any, will be adopted or enacted into law, or the timing or effect of any initiatives or reductions. However, given the uncertainty in the funding of Medicare and Medicaid spending in the future, there will almost certainly be new proposals for healthcare reforms and other changes to the laws, regulations, or the operations of governmental agencies that will affect our government reimbursement or business. There can be no assurance future governmental action will not result in substantial changes to, or material reductions in, our reimbursements, including through Medicaid and related state directed and supplemental payment programs.
We receive state directed and supplemental payments in connection with several state Medicaid programs. In 2025, those payments totaled approximately $148 million. We also pay provider taxes to fund, in part, state Medicaid programs, and in 2025 those payments totaled approximately $127 million. In May 2024, CMS issued a final rule related to Medicaid managed care programs that addresses state directed payment programs and imposes new requirements for these programs. The various elements of the rule take effect between its issuance and early 2028. Ultimately, this rule could result in significant changes to state directed and supplemental payment programs from which we receive payments. However, a federal district court recently vacated portions of this rule following a legal challenge by the state of Texas. CMS appealed the decision, but the court enjoined enforcement of this rule while the appeal is pending. The OBBBA also contains provisions limiting states’ ability to assess provider taxes to increase federal matching Medicaid funds and make directed payments to providers. Most of these provisions take effect in 2027 or later and likely require additional federal and state regulatory action to implement.
It is possible that additional rulemaking could result in significant restructurings of existing state Medicaid programs, including provider tax and related directed and supplemental payment programs. State authorities design the structures and operations of these programs to promote access to acute-care hospitals for Medicaid patients by supplementing acute-care
reimbursement. Historically, we are not aware of any IRFs playing a significant role in the design given the limited number of IRF Medicaid patients, so we are uncertain what attention state authorities will give to the effects of additional rulemaking on IRFs. We are unable to estimate the financial impact that structural modifications and other program changes, if any, may have on our Medicaid provider tax expenses or directed and supplemental payments. We cannot be certain that changes to state directed and supplemental payment programs will directly correspond to changes in the related provider taxes. CMS periodically assesses the compliance of these programs, and CMS’s determination that a state’s program fails to comply may result in a decrease in state directed and supplemental payments and recoupment of prior payments under that state’s noncompliant program.
In any given year, the net effect of statutory and regulatory changes may result in a decreases in our reimbursement rates and amounts, and those decreases may occur at times when our expenses are increasing. For example, in some recent years, our wage and benefit costs increased at a rate in excess of our aggregate Medicare reimbursement rate increases. Similar changes in our revenues and expenses could result in a material adverse effect on our business, financial position, results of operations, and cash flows. For additional discussion of how we are reimbursed by Medicare and Medicaid, see Item 1, Business, “Regulatory and Reimbursement Challenges” and “Sources of Revenues.”
In addition, there are increasing pressures from managed care, including Medicare Advantage, and other third-party payors to control healthcare costs and to reduce or limit increases in reimbursement rates for medical services. For example, each year CMS adopts updates to the payments to, and the payment policies for, Medicare Advantage payors, and those updates may result in a net decrease in payments to those payors. Our relationships with managed care and nongovernmental third-party payors, such as health maintenance organizations and preferred provider organizations, are generally governed by negotiated agreements. These agreements set forth the amounts we are entitled to receive for our services. Our Net operating revenues and our ability to grow our business with these payors could be adversely affected if we are unable to negotiate and maintain favorable agreements with these payors.
Reimbursement claims are subject to various audits from time to time and such audits may negatively affect our operations and our cash flows from operations.
We receive a substantial portion of our revenues from the Medicare program. Medicare reimbursement claims made by healthcare providers, including inpatient rehabilitation hospitals, are subject to audit from time to time by governmental payors, such as CMS and state Medicaid programs, their agents, such as the Medicare Administrative Contractors (“MACs”) that act as fiscal intermediaries for all Medicare billings and other auditors contracted by CMS, and private insurance carriers, as well as the HHS Office of Inspector General (the “HHS-OIG”). As noted above, the clarity and completeness of each patient medical file, some of which is the work product of a physician not employed by us, is essential to successfully challenging any payment denials. If the physicians working with our patients do not adequately document, among other things, their diagnoses and plans of care, our risks related to audits and payment denials in general are greater. Adding to the difficulty associated with the billing and audit processes, we also believe that the MACs and other CMS auditors reviewing claims frequently lack sufficient expertise in rehabilitative care and the related CMS rules and regulations. Depending on the nature of the conduct found in billing audits and whether the underlying conduct could be considered systemic, the resolution of these audits could have a material adverse effect in the aggregate on our financial position, results of operation, cash flows, and liquidity.
In the context of our inpatient rehabilitation business, one of the common grounds cited for denying a claim or challenging a previously paid Medicare claim in an audit is that the patient’s treatment in a hospital was not medically necessary. The medical record must support that both the documentation and coverage criteria requirements are met for the hospital stay to be considered medically necessary. Medical necessity is an assessment by an independent physician of a patient’s ability to tolerate and benefit from intensive multi-disciplinary therapy provided in an IRF setting. A Medicare claim may be denied or challenged based on an opinion of the auditor that the record did not evidence medical necessity for treatment in an IRF or lacked sufficient documentation to support the conclusion. Some MACs have in the past applied, and are likely in the future to apply, their own unique interpretation of CMS coverage rules or impose otherwise arbitrary conditions not set out in the related rules, which has resulted, and may in the future result, in payment denials.
In some cases, we believe the reviewing party is not merely challenging the sufficiency of the medical record but is substituting its judgment of medical necessity for that of the attending physician or imposing documentation or other requirements that are not set out in the regulations. We argue that doing so is inappropriate and has no basis in law. When the government or its contractors reject the medical judgment of physicians or impose documentation and other requirements beyond the language of the statutes and regulations, patient access to inpatient rehabilitation as well as our Medicare reimbursement from the related claims may be adversely affected.
Under CMS’s Targeted Probe and Educate (“TPE”) program, MACs use data analysis to identify healthcare providers with unusual billing practices, high claim error rates, and items and services that have high national error rates. Once a MAC
selects a provider for claims review, the initial volume of claims review is limited to 20 to 40 claims. The TPE program includes up to three rounds of claims review with corresponding provider education and a subsequent period to allow for improvement. If results do not improve sufficiently after three rounds, the MAC may refer the provider to CMS for further action, which may include extrapolation of error rates to a broader universe of claims or referral to a UPIC or RAC (defined below). As of December 31, 2025, none of our hospitals have progressed beyond the third round of reviews, so it is unclear how the review process after TPE would proceed. We cannot predict whether the TPE initiative or similar probes or reviews will materially impact our reimbursement or the timeliness of collections from Medicare in the future.
CMS has developed and instituted various audit programs under which CMS contracts with private companies to conduct claims and medical record audits. These audits are in addition to those conducted by existing MACs. Some contractors are paid a percentage of the overpayments recovered. One type of audit contractor, the Recovery Audit Contractor (“RAC”), receives claims data directly from MACs on a monthly or quarterly basis and is authorized to review previously paid claims. RAC audits of IRFs have focused on reviews of patient coding, medical necessity, and billing accuracy. CMS has, however, authorized RACs to conduct complex reviews of the medical records associated with IRF reimbursement claims. CMS has previously operated a demonstration project that expanded the RAC program to include prepayment review of Medicare fee-for-service claims from primarily acute-care hospitals. It is unclear whether CMS intends to conduct RAC prepayment reviews in the future and if so, what providers and claims would be the focus of those reviews.
CMS has also established other types of contractors, including the Uniform Program Integrity Contractor (“UPIC”) and the Supplemental Medical Review Contractor (“SMRC”). The UPICs conduct audits with a focus on potential fraud and abuse issues. Like the RACs, the UPICs conduct audits and have the ability to refer matters to the HHS-OIG or the United States Department of Justice (“DOJ”). Unlike RACs, however, UPICs do not receive a specific financial incentive based on the amount of the error. In December 2017, we received notice of a UPIC audit at one of our hospitals. The UPIC sampled 100 claims and challenged the propriety of a subset of the sample representing $1.3 million in previously paid claims. The UPIC extrapolated the alleged error rate to all claims from that hospital during a period of approximately four years, resulting in an alleged overpayment of $33.9 million. Our MAC later reduced the determination of overpayment to $30.5 million, which it collected through recoupment of current claims during 2019. We appealed the overpayment determination to an Administrative Law Judge (“ALJ”), who heard the appeal in August 2021. In October 2022, the ALJ overturned $12.5 million of the overpayment determination. We received payment of this amount, plus $3.2 million in interest, in December 2022. We have appealed the remaining $18.0 million of the overpayment determination to the next level of administrative appeal, challenging both the denials and the improper use of extrapolation. It is not possible to predict when this matter will be resolved or the ultimate outcome. The SMRC conducts nationwide medical reviews of Medicare claims to determine compliance with coverage, coding, payment, and billing requirements.
Audits may lead to assertions that we have been underpaid or overpaid by Medicare or have submitted improper claims in some instances. Such assertions may require us to incur additional costs to respond to requests for records and defend the validity of payments and claims and may ultimately require us to refund any amounts determined to have been overpaid. In some circumstances auditors have the authority to extrapolate denial rationales to large pools of claims not actually audited, which could greatly increase the impact of the audit. As a result, we may suffer reduced profitability, and we may have to elect not to accept patients and conditions physicians believe can benefit from inpatient rehabilitation. We cannot predict when or how these audit programs will affect us.
Our managed care, including Medicare Advantage, and other third-party payors may also, from time to time, request audits of the amounts paid, or to be paid, to us. We could be adversely affected if one or more auditing payors allege substantial overpayments were made to us due to coding errors or lack of documentation to support medical necessity determinations. Similarly, there can be no assurance that our current or future MACs will not make restrictive or otherwise incorrect interpretations of Medicare coverage rules. Because one MAC has jurisdiction over a significant number of our hospitals and our hospitals derive a substantial portion of their revenue from Medicare, the adoption of restrictive or otherwise incorrect interpretations of coverage rules by that MAC could result in a large number of payment denials and materially and adversely affect our financial position, results of operations, and cash flows.
Substantive and procedural deficiencies in the administrative appeals process associated with denied Medicare reimbursement claims could delay and reduce our reimbursement for services previously provided.
Ordinary course Medicare pre-payment denials by MACs, as well as denials resulting from post-payment audits, are subject to appeal by providers. HHS provides an initial appeal process through its ALJs. We have historically appealed a majority of our claims denials. Due to the sheer number of appeals by all Medicare providers and various administrative inefficiencies, including a shortage of judges, appeals that are required by statute to be resolved in a matter of months have in the past taken years to complete. In recent years, this protracted appeals process led to a significant backlog of appeals of
denials, which a federal judge ultimately ordered HHS to resolve. Changes implemented by CMS to resolve the backlog may have harmed the ability of providers like us to recover on valid Medicare claims. The Medicare appeals adjudication process is administered by the Office of Medicare Hearings and Appeals (“OMHA”). Beginning in March 2020, OMHA increased the frequency of ALJ hearings and the number of claims set at each hearing, which we believe added to the substantive and procedural deficiencies in the ALJ appeals process. There can be no assurance significant backlogs will not develop in the future or that CMS will not address such a backlog in a manner that we believe compromises providers’ due process rights.
Providers may appeal adverse ALJ rulings to the Department Appeals Board (the “DAB”). Denials by the DAB may be appealed to United States district courts. As of December 31, 2025, we have approximately $12 million and $21 million in denied claims awaiting review at the ALJ and DAB levels, respectively. In addition, we have approximately $6 million in claims denied by the DAB pending review by United States district courts as of December 31, 2025.
Based on a number of factors, including prior experience in the appeals process, we record our estimates for pre-payment denials and for post-payment audit denials that will ultimately not be collected as a component of Net operating revenues. See Note 1, Summary of Significant Accounting Policies, “Net Operating Revenues,” to the accompanying consolidated financial statements. We have in the past, and may again in the future, experience decreases in Net operating revenues and decreases in cash flow as a result of greater frequency of unfavorable resolution of denials or increasing unresolved denials and the associated increasing accounts receivable, which may in turn force us to change the patients we admit and conditions we treat. Any of these impacts could have an adverse effect on our financial position, results of operations, and liquidity.
Changes in our payor mix or the acuity of our patients could adversely affect our Net operating revenues or our profitability.
Many factors affect reimbursement rates for our services and, in turn, our revenues. These factors include the treating facility’s urban or rural status, the length of stay, the payor and its applicable rate of reimbursement, and the patient’s medical condition and impairment status (acuity). The reimbursement rates we receive from traditional Medicare fee-for-service are generally higher than those received from other payors, although the difference between traditional Medicare and Medicare Advantage payments for inpatient rehabilitation care has decreased in the last several years. Over the same period, we have seen a shift in the payor mix from traditional Medicare to Medicare Advantage and other managed care providers. Not only do Medicare Advantage and managed care payors generally pay us less, but we would expect bad debt to be higher for patients covered by Medicare Advantage and managed care as patients typically retain more payment responsibility under those arrangements. Additionally, the rate at which Medicare Advantage referrals are converted to admissions is lower than the rate for traditional Medicare.
In the past, we have experienced a shift to a slightly larger percentage of Medicaid patients, driven in part by the expansion of coverage consistent with the intent of the ACA and the expansion of coverage resulting from regulatory actions during the COVID-19 public health emergency. Medicaid reimbursement rates are almost always the lowest among those of our payors, and frequently Medicaid patients come to us with other complicating conditions that make treatment more difficult and costly. We cannot predict the growth of, or changes to, Medicaid.
Also, a shift to a lower average patient acuity typically results in lower reimbursement rates regardless of the payor. Both a shift in our payor mix away from Medicare fee-for-service and a shift to a lower patient acuity would likely adversely affect reimbursement. See the “Results of Operations—Net Operating Revenues” section of Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations. We cannot predict the extent to which our payor mix may shift to lower reimbursement rate payors. We have in recent years experienced, and in the future may, experience shifts in our payor mix or the acuity of our patients that could adversely affect our reimbursement, Net operating revenues, and profitability.
Delays in collection or non-collection of our accounts receivable could adversely affect our business, financial position, results of operations, cash flows, and liquidity.
Reimbursement is typically conditioned on our documenting medical necessity and correctly applying diagnosis codes. Incorrect or incomplete documentation and billing information could result in non-payment for services rendered. Billing and collection of our accounts receivable are further subject to the complex regulations that govern Medicare and Medicaid reimbursement and rules imposed by nongovernment payors. Our inability to bill and collect on a timely basis pursuant to these regulations and rules could subject us to payment delays that could have a material adverse effect on our business, financial position, results of operations, cash flows, and liquidity.
In addition, timing delays in billings and collections may increase our working capital burden. Working capital management, including prompt and diligent billing and collection, is an important factor in our financial position and results of operations and in maintaining liquidity. It is possible that Medicare, Medicaid, documentation support, system problems or
other provider issues or industry trends, particularly with respect to newly acquired entities for which we have limited operational experience, may extend our collection period, which may materially adversely affect our working capital, and our working capital management procedures may not successfully mitigate this risk.
The timing of payments made under the Medicare and Medicaid programs is subject to governmental budgetary constraints, which may result in an increased period of time between submission of claims and subsequent payment under specific programs, most notably under the Medicare and Medicaid managed care programs, which in many cases pay claims significantly slower than traditional Medicare or state Medicaid programs do as a result of more complicated authorization, billing and collecting processes that are required by Medicare and Medicaid managed care programs. In addition, we may experience delays in reimbursement as a result of the failure to receive prompt approvals related to change of ownership applications for acquired or other facilities or from delays caused by our or other third parties’ information system failures. Furthermore, the proliferation of Medicare and Medicaid managed care programs could have a material adverse impact on the results of our operations as a result of more complicated authorization, billing and collection requirements implemented by such programs.
A change in our estimates of collectability or a delay in collection of accounts receivable could adversely affect our results of operations and liquidity. The estimates are based on a variety of factors, including the length of time receivables are past due, significant one-time events, contractual rights, the nature of the underlying payment denials, and historical experience. In the fourth quarter of 2023, we recorded aggregate amount of $21.9 million in additional reserves for estimated uncollectible amounts associated with claims denied and appealed prior to 2023. The increase in reserves largely offset the accounts receivable associated with these claims. A delay in collecting our accounts receivable, or the non-collection of accounts receivable, including, without limitation, in connection with our transition and integration of acquired companies and the attendant movement of underlying billing and collection operations from legacy systems to future systems, could have a material negative impact on our results of operations and liquidity, and we could be required to record further impairment charges on our financial statements.
Efforts to reduce payments to healthcare providers undertaken by third-party payors, conveners, and referral sources could adversely affect our revenues and profitability.
Health insurers and managed care companies, including Medicare Advantage plans, may utilize certain third parties, known as conveners, and their own internal analytics to attempt to control costs. Conveners offer patient placement and care transition services to those payors as well as bundled payment participants, ACOs, and other healthcare providers with the intent of managing post-acute utilization and associated costs. Conveners may influence referral source decisions on which post-acute setting to recommend, as well as how long to remain in a particular setting. Given their focus on perceived financial savings, conveners customarily suggest that patients avoid higher acuity post-acute settings altogether or move as soon as practicable to lower acuity settings as those settings are reimbursed at lower rates due to the lower level of care they are required to provide. Conveners are not healthcare providers and may suggest a post-acute setting or duration of care that may not be appropriate from a clinical perspective potentially resulting in worse patient outcomes and costly acute-care hospital readmissions.
Medicare Advantage plans may use overly restrictive coverage determinations in the pre-authorization process to limit participating members’ access to needed inpatient rehabilitative care. Medicare Advantage plans must provide coverage for inpatient rehabilitative care to the extent conventional Medicare does. However, in our experience, Medicare Advantage plans frequently deny coverage for inpatient rehabilitative care when the patients would have qualified for that care under conventional Medicare rules. Additionally, large Medicare Advantage plans have acquired home health operators. Those Medicare Advantage plans may attempt to shift patients who would benefit from intensive inpatient rehabilitation to home health in order to reduce costs to the plans in the near term.
We also depend on referrals from physicians, acute-care hospitals, and other healthcare providers in the communities we serve. As a result of various alternative payment models, many referral sources are becoming increasingly focused on reducing post-acute costs by eliminating post-acute care referrals or referring patients to perceived low-cost post-acute settings rather than rehabilitation hospitals, sometimes without understanding the potential impact on patient outcomes over an entire episode of care. Our ability to attract patients could be adversely affected if any of our hospitals fail to provide or maintain a reputation for providing high-quality care on a cost-effective basis as compared to other providers.
Quality reporting requirements could adversely affect the Medicare reimbursement we receive.
The focus on alternative payment models and value-based purchasing of healthcare services has led to more extensive quality of care reporting requirements. In many cases, the new reporting requirements are linked to reimbursement incentives. For example, under the ACA, CMS established new quality data reporting, effective October 1, 2012, for all IRFs. A facility’s failure to submit the required quality data results in a two percentage point reduction to that facility’s annual market basket increase factor for payments made for discharges in the subsequent Medicare fiscal year. Hospitals began submitting quality data to CMS in October 2012. To date, only two of our hospitals have experienced payment reductions, both for fiscal year 2025. We contested those two determinations and have not yet received final decisions.
The IMPACT Act mandated that CMS adopt several new quality reporting measures for the various post-acute provider types. The adoption of additional quality reporting measures to track and report will require additional time and expense and could materially affect reimbursement in the future. In healthcare generally, the burdens associated with collecting, recording, and reporting quality data are increasing. There can be no assurance our hospitals will meet quality reporting requirements or quality performance in the future. Failure to do so will result in any associated hospital seeing a reduction in its Medicare reimbursement. Regardless, we, like other healthcare providers, are likely to incur additional expenses in an effort to comply with additional and changing quality reporting requirements.
Other Regulatory Risks
The ongoing evolution of the healthcare delivery system, including alternative payment models and value-based purchasing initiatives, in the United States may significantly affect our business and results of operations.
The healthcare industry in general is facing regulatory uncertainty around attempts to improve outcomes and reduce costs, including coordinated care and integrated payment models. In an integrated payment model, hospitals, physicians, and other care providers are reimbursed in a fashion meant to encourage coordinated healthcare on a more efficient, patient-centered basis. These providers are then paid based on the overall value and quality (as determined by outcomes) of the services they provide to a patient rather than the number and nature of services they provide. While this is consistent with our goal and proven track record of being a high-quality, cost-effective provider, broad-based implementation of a new payment model would represent a significant evolution or transformation of the healthcare industry, which may have a significant impact on our business and results of operations.
In recent years, HHS has been studying the feasibility of bundling, including conducting a voluntary, multi-year bundling pilot program to test and evaluate alternative payment methodologies. CMS’ voluntary Bundled Payments for Care Improvement Advanced (“BPCI Advanced”) initiative began October 1, 2018, ran through December 31, 2025, and covered 29 types of inpatient, three types of outpatient clinical episodes, and two multi-setting clinical episodes, including stroke and hip fracture. Providers participating in BPCI Advanced are subject to a semi-annual reconciliation process where CMS compares the aggregate Medicare expenditures for all items and services included in a clinical episode against the target price for that type of episode to determine whether the participant is eligible to receive a portion of the savings, or is required to repay a portion of the payment above target. Accordingly, reimbursement may be increased or decreased, compared to what would otherwise be due, based on whether the total Medicare expenditures and patient outcomes meet, exceed or fall short of the targets. BPCI Advanced did not have a material impact on our hospitals.
Similarly, CMS has established, per the ACA, several separate ACO programs. The largest is the Medicare Shared Savings Program (“MSSP”), a voluntary ACO program in which hospitals, physicians, and other care providers pursue the delivery of coordinated healthcare on a more efficient, patient-centered basis. Conceptually, ACOs receive a portion of any savings generated above a certain threshold from care coordination as long as benchmarks for the quality of care are maintained. Under the MSSP, there are two ACO tracks from which participants can choose. Each track offers a different degree to which participants share any savings realized or any obligation to repay losses suffered. The ACO rules adopted by CMS are extremely complex and remain subject to further refinement by CMS.
On November 16, 2015, CMS published its final rule establishing the Comprehensive Care for Joint Replacement (“CJR”) payment model, which holds acute-care hospitals accountable for the quality of care they deliver to Medicare fee-for-service beneficiaries for lower extremity joint replacements (i.e., knees and hips) from surgery through recovery. The CJR originally was mandatory for the acute-care hospitals in the 67 geographic areas covered. On November 30, 2017, CMS issued a final rule making the CJR voluntary in 33 of those areas. The CJR model’s original five-year term ended in December 2020, but CMS extended the model through 2024 for most providers in the 34 geographic areas with mandatory participation. Under CJR, healthcare providers in the mandatory participation areas are paid under existing Medicare payment systems. However, CMS holds the acute-care hospital where a joint replacement takes place accountable for the quality and costs of care for the entire episode of care — from the time of the original admission through 90 days after discharge. Depending on the quality and
cost performance during the entire episode, the acute-care hospital may receive an additional payment or be required to repay Medicare a portion of the episode costs. As a result, CMS believes acute-care hospitals are incented to work with physicians and post-acute care providers to ensure beneficiaries receive the coordinated care they need in an efficient manner. Acute-care hospitals participating in the CJR model may enter into risk-sharing financial arrangements with post-acute providers, including IRFs. CJR did not have a material impact on our hospitals.
On August 1, 2024, CMS published its final rule establishing the Transforming Episode Accountability Model (“TEAM”). This five-year mandatory model began January 1, 2026 and ends on December 31, 2030. The model seeks to test whether 30-day episode-based payments for five common surgical procedures will reduce Medicare expenditures without lowering quality of care. The five procedures are: lower extremity joint replacement, surgical hip femur fracture treatment, spinal fusion, coronary artery bypass graft, and major bowel procedures. All acute-care hospitals located in the 189 markets selected will be required to participate in TEAM. Based on 2024 Medicare discharge data, approximately 2% of our total discharges were associated with the five procedures in the markets covered by the model. Under TEAM, healthcare providers in those markets are paid under existing Medicare payment systems. CMS will hold the acute-care hospital where these procedures take place accountable for the quality and costs of care for the entire episode of care — from the time of the original admission through 30 days after an acute-care discharge. Acute healthcare providers will receive a target price based on all non-excluded Medicare Parts A & B items and services included in an episode. Depending on the quality and cost performance during the entire episode, the acute-care hospital may receive an additional payment or, beginning in the second year, be required to repay a portion of the episode costs that exceed the target price. Before taking into account quality of care and outcomes, for each of the five procedures in TEAM, the 30-day average total spend in 2024 where an IRF stay followed the acute-care discharge exceeded the corresponding target price established by CMS.
HHS and CMS continue to explore ways to encourage and facilitate increased participation in alternative payment models and value-based purchasing initiatives. Broad-based implementation of a new payment model would represent a significant transformation for us and the healthcare industry generally. The nature and timing of the evolution or transformation of the current healthcare system to coordinated care delivery and integrated payment models and value-based purchasing remain uncertain. The development of new delivery and payment systems will almost certainly take significant time and expense. Many of the alternative approaches, including those discussed above, being explored may not work or could change substantially prior to any nationwide implementations. While only a small percentage of our business currently is subject to the alternative payment models discussed above, we cannot be certain these models will not be expanded or made standard or new models will not be implemented broadly.
Additionally, as the number and types of bundling, direct contracting, and ACO models increase, the number of Medicare beneficiaries who are treated in one of the models increases. Our willingness or inability to participate in integrated payment and other alternative payment models and the referral patterns of other providers participating in those models may limit our access to Medicare patients who would benefit from treatment in inpatient rehabilitation hospitals. In an attempt to reduce costs or increase reimbursements, referral sources may seek to discourage referrals to IRFs or post-acute care all together. To the extent that acute-care hospitals participating in those models do not perceive our quality of care or cost efficiency favorably compared to alternative post-acute providers, we may experience a decrease in volumes and Net operating revenues, which could adversely affect our financial position, results of operations, and cash flows. For further discussion of coordinated care and integrated payment models and value-based purchasing initiatives, the associated challenges, and our efforts to respond to them, see the “Executive Overview—Key Challenges—Changes in Medicare Reimbursement and Regulatory Requirements for Operating IRFs” section of Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations.
Other legislative and regulatory initiatives and changes affecting the industry could adversely affect our business and results of operations.
In addition to the legislative and regulatory actions that directly affect our reimbursement rates or further the evolution of the current healthcare delivery system, other legislative and regulatory changes affect healthcare providers like us from time to time. For example, the ACA expanded the federal Anti-Kickback Law and the False Claims Act (the “FCA”) increasing compliance scrutiny in the healthcare industry generally. Those changes included additional resources for enforcement, lowered burden of proof for the government in healthcare fraud matters, expanded definition of claims under the FCA, enhanced penalties, and increased rewards for relators in successful prosecutions. CMS may also suspend payment for claims prospectively if, in its opinion, credible allegations of fraud exist. The initial suspension period may be up to 180 days. However, the payment suspension period can be extended almost indefinitely if the matter is under investigation by the HHS-OIG or DOJ. Any such suspension would adversely affect our financial position, results of operations, and cash flows.
Some states in which we operate have also undertaken, or are considering, healthcare reform initiatives that address similar issues. While many of the stated goals of other federal and state reform initiatives are consistent with our own goal to provide care that is high-quality and cost-effective, legislation and regulatory proposals may lower reimbursements, increase the cost of compliance, decrease patient volumes, promote frivolous or baseless litigation, and otherwise adversely affect our business. We cannot predict what healthcare initiatives, if any, will be enacted, implemented or amended, or the effect any future legislation or regulation will have on us.
On December 14, 2020, CMS announced the proposal of a five-year review choice demonstration for inpatient rehabilitation services (the “RCD”). In August 2023, IRFs located in Alabama began participation in RCD. On June 17, 2024, CMS expanded RCD to include IRFs located in Pennsylvania and billing to a certain MAC. We do not bill to that MAC, so we are not subject to the program in Pennsylvania at this time. In December 2025, CMS announced the expansion of RCD to Texas and California, effective March 2, 2026 and May 1, 2026, respectively. With the expansion to those two states, we expect 33 of our current inpatient rehabilitation hospitals (representing approximately 11.9% of our IRF Medicare claims) to be subject to RCD. After the initial four states, CMS intends to expand the demonstration to include additional IRFs based on the MAC to which those IRFs submit claims. There are no details of that expansion at this time.
Under the RCD, participating IRFs have an initial choice between pre-claim or post-payment review of 100% of Medicare claims submitted to demonstrate compliance with applicable coverage and clinical documentation requirements. We elected the pre-claim review option for our IRFs in Alabama for the first cycle. Under the pre-claim review choice, services can begin prior to the submission of the review request and continue while the decision is being made. The pre-claim review request with required documentation must be submitted, reviewed, and approved before the final claim is paid. If a certain percentage of the claims reviewed are found to be valid, the IRF may then opt out of the 100% review. The opt-out validation percentages for the first, second, and third cycles were 80% or greater, 85% or greater and 90% or greater, respectively. In opting out, the IRF may elect spot prepayment reviews of samples consisting of 5% of total claims or selective post-payment review of a statistically valid random sample. Our claim validation rate for the first cycle ending in February 2024 exceeded the 80% threshold at all participating hospitals. For the second cycle, which began on May 1, 2024, we elected not to opt out, so our hospitals in Alabama remained subject to the 100% pre-claim review. None of our hospitals in Alabama achieved the opt-out claim validation rate for the second or third cycles ending in October 2024 and June 2025, respectively. We believe many of the non-affirmations in these cycles were based on application of improper standards or requirements that directly conflict with the Medicare coverage criteria for IRFs. We have engaged, and will continue to engage, with the MAC and CMS to ensure the review process is consistent with existing rules, regulations and statutes. In the fourth cycle which began September 1, 2025, the affirmation rate required to opt-out remains 90% or greater. Given the inconsistent review process applied by the MAC across the previous cycles, we cannot predict the impact, if any, RCD may have on the collectability of our Medicare claims over its five-year term. We may ultimately experience decreases in Net operating revenues and in cash flow, or we may incur costs associated with patient care for which the Medicare claim is subsequently denied, any of which could have an adverse effect on our financial position, results of operations, and liquidity.
In January 2020, the HHS-OIG announced an audit to review incentives under the IRF-PPS to discharge patients prematurely to home health agencies. Following this audit, the HHS-OIG announced in December 2021 its recommendation to CMS to establish an IRF transfer payment policy for early discharges to home health care in which the IRF would only receive a per diem rate in lieu of the full case-mix payment. The HHS-OIG estimated the policy could have reduced total Medicare payments to IRFs in 2017 and 2018 by between 6% and 7%. The CMS proposed rule for fiscal year 2023 for the IRF-PPS included a request for comment on a potential change that could be included in future rulemaking. Based on the HHS-OIG report, CMS noted it was considering whether to modify the IRF transfer payment policy to reduce reimbursement for early discharges to home health, similar to how early discharges to acute-care hospitals, skilled nursing facilities, long-term acute-care hospitals, or another IRF, are currently treated under the IRF-PPS. In the final IRF-PPS rule for 2023, CMS acknowledged industry comments on the policy and noted those comments would be taken under advisement for future rulemaking, but neither the proposed nor the final rulemaking for fiscal years 2024, 2025, or 2026 made reference to a change in the IRF transfer payment policy.
We cannot predict what legislative or regulatory reforms or changes, if any, will ultimately be proposed, enacted, or implemented, or the timing or effect any of those changes or reforms will have on us. If enacted, they may be challenging for all providers and have the effect of limiting Medicare beneficiaries’ access to healthcare services and could have a material adverse impact on our Net operating revenues, financial position, results of operations, and cash flows. For additional discussion of healthcare reform and other factors affecting reimbursement for our services, see Item 1, Business, “Regulatory and Reimbursement Challenges” and “Sources of Revenues—Medicare Reimbursement.”
Compliance with the extensive laws and government regulations applicable to healthcare providers requires substantial time, effort and expense, and if we fail to comply with them, we could suffer penalties or be required to make significant changes to our operations.
Healthcare providers are required to comply with extensive and complex laws and regulations at the federal, state, and local government levels. These laws and regulations relate to, among other things:
•licensure, certification, enrollments, and accreditation;
•policies, either at the national or local level, delineating what conditions must be met to qualify for reimbursement under Medicare (also referred to as coverage requirements);
•coding and billing for services;
•requirements of the “60% Rule” applicable to inpatient rehabilitation facilities;
•relationships with physicians and other referral sources, including physician self-referral and anti-kickback laws;
•quality of medical care;
•use and maintenance of medical supplies and equipment;
•maintenance and security of patient information and medical records;
•minimum staffing;
•acquisition and dispensing of pharmaceuticals and controlled substances;
•pricing transparency and similar consumer protection rules; and
•disposal of medical and hazardous waste.
The “60% Rule” is a Medicare requirement that at least 60% of an IRF’s patients must have a diagnosis or qualifying comorbidity from at least one of 13 specified medical conditions that typically require intensive therapy and supervision, such as stroke, brain injury, hip fracture, certain neurological conditions, and spinal cord injury. From time to time CMS has adopted changes in the medical conditions that presumptively count toward the 60% compliance threshold to qualify for reimbursement as an IRF. If a facility does not demonstrate compliance with the 60% Rule by either the presumptive method or through a review of medical records, then its classification as an IRF may be terminated by CMS causing the facility to be paid under the acute-care payment system which would result in reduced reimbursement per discharge. If one or more of our hospitals fails to demonstrate compliance with the 60% Rule and CMS re-classifies it as an acute-care hospital, our revenue and profitability may be materially and adversely affected.
In the future, changes in these laws or regulations or the manner in which they are enforced could subject our current or past practices to allegations of impropriety or illegality or could require us to make changes in our hospitals, equipment, personnel, services, capital expenditure programs, operating procedures, and contractual arrangements. Those changes could also affect reimbursements as well as future compliance, training, and staffing costs.
Of note, the HHS-OIG periodically updates a work plan that identifies areas of compliance focus. In recent years, the HHS-OIG work plans for IRFs have focused on, among other items, the appropriate utilization of concurrent and group therapy, adverse and temporary patient harm events, and billing error rates for IRFs. In September 2018, the HHS-OIG released a report purporting to identify a high error rate (approximately 80% of claims) among inpatient rehabilitation hospital admissions in a small sample of 220 claims. Based on its findings, the HHS-OIG extrapolated the error rate to the universe of inpatient rehabilitation claims and, among other things, recommended reevaluation of the IRF-PPS. However, that HHS-OIG report involved an extremely small sample size, was not a random sample of cases, included some citations to coverage requirements that did not match actual regulations, appeared to conflate technical documentation requirements with medical necessity determinations, and was at odds with actual MAC reviews of claims during that same timeframe which found substantially lower error rates. On September 15, 2022, the HHS-OIG updated its work plan to conduct a nationwide audit of IRF claims in order to determine the extent to which CMS could clarify the Medicare IRF claim payment criteria. We expect the HHS-OIG to issue a report on this in 2026. An HHS-OIG work plan, audit or similar future efforts could result in proposed changes to the payment systems for providers or increased denials of Medicare claims for patients notwithstanding the referring physicians’ judgment that treatment is appropriate.
As the recent HHS-OIG work plans demonstrate, the clarity and completeness of each patient medical file, some of which is the work product of a physician not employed by us, are essential to demonstrating our compliance with various regulatory and reimbursement requirements. For example, to support the determination that a patient’s IRF treatment was medically necessary, the file must contain, among other things, an admitting physician’s assessment of the patient as well as a post-admission assessment by the treating physician and other information from clinicians relating to the plan of care and the therapies being provided. These physicians are not employees. They exercise independent medical judgment. We and our hospital medical directors, who are independent contractors, provide training on a regular basis to the physicians who treat patients at our hospitals regarding appropriate documentation. However, we ultimately do not and cannot control the physicians’ medical judgment. In connection with subsequent payment audits and investigations, there can be no assurance as to what opinion a third party may take regarding the status of patient files or the physicians’ medical judgment evidenced in those files.
On March 4, 2013, we received document subpoenas from an office of the HHS-OIG addressed to four of our hospitals. On April 24, 2014, we received document subpoenas relating to an additional seven of our hospitals. Those subpoenas requested documents, including copies of patient medical records, related to reimbursement claims submitted during periods ranging from January 2008 through December 2013. The associated investigation led by DOJ was based on whistleblower claims of alleged improper or fraudulent claims submitted to Medicare and Medicaid and requested documents and materials relating to practices, procedures, protocols and policies of certain pre- and post-admissions activities at these hospitals including marketing functions, pre-admission screening, post-admission physician evaluations, patient assessment instruments, individualized patient plans of care, and compliance with the Medicare 60% rule. We settled the DOJ investigation, together with the related qui tam or whistleblower lawsuits, in 2019 for a total payment of $48 million, and we expressly denied any wrongdoing. In return for the settlement payment, the plaintiffs dismissed with prejudice their pending qui tam claims, and DOJ provided Encompass Health and all its subsidiaries with a release from civil liability.
Although we have invested, and will continue to invest, substantial time, effort, and expense in implementing and maintaining training programs as well as internal controls and procedures designed to ensure regulatory compliance, we have in the past been, and could in the future be, required to return portions of reimbursements for discharges alleged after the fact to have not been appropriate under the applicable reimbursement rules and change our patient admissions practices going forward. We could also be subjected to other liabilities, including (1) criminal penalties, (2) civil penalties, including monetary penalties and the loss of our licenses to operate one or more of our hospitals, and (3) exclusion or suspension of one or more of our hospitals from participation in the Medicare, Medicaid, and other federal and state healthcare programs, which, if lengthy in duration and material to us, could potentially trigger a default under our credit agreement or debt instruments.
Because Medicare comprises a significant portion of our Net operating revenues, failure to comply with the laws and regulations governing the Medicare program and related matters, including anti-kickback and anti-fraud requirements, could materially and adversely affect us. In the past few years, DOJ and HHS as well as federal lawmakers have significantly increased efforts to ensure strict compliance with various reimbursement related regulations as well as combat healthcare fraud. DOJ has pursued and recovered record amounts based on alleged healthcare fraud. The increased enforcement efforts have frequently included aggressive arguments and interpretations of laws and regulations that pose risks for all providers. For example, the federal government and individual relators have increasingly asserted that incidents of erroneous billing or record keeping may represent violations of the FCA. Human error and oversight in record keeping and documentation, particularly where those activities are the responsibility of non-employees, are always a risk in business, and healthcare providers and independent physicians are not immune to this risk. Additionally, the federal government has been willing to challenge the medical judgment of independent physicians in determining issues such as the medical necessity of a given treatment plan. Furthermore, the federal government has increasingly asserted that violations of laws not directly related to Medicare billing, such as anti-kickback and anti-discrimination laws, represent FCA violations, which typically carry higher monetary penalties.
Settlements of alleged violations or imposed reductions in reimbursements, substantial damages and other remedies assessed against us could have a material adverse effect on our business, financial position, results of operations, and cash flows. Even the assertion of a violation, depending on its nature, could have a material adverse effect upon our stock price or reputation and could cost us significant time and expense to defend.
The use of sub-regulatory guidance, statistical sampling, and extrapolation by CMS, Medicare contractors, HHS-OIG, and DOJ to deny claims, expand enforcement claims, and advocate for changes in reimbursement policy increases the risk that we could experience reduced revenue, suffer penalties, or be required to make significant changes to our operations.
Because Medicare comprises a significant portion of our Net operating revenues, failure to comply with the laws and regulations governing the Medicare program and related matters, including anti-kickback and anti-fraud requirements, could materially and adversely affect us. Our ability to operate in a compliant manner impacts the claims denials, compliance enforcement, and regulatory processes discussed in other risks above. The federal government’s reliance on sub-regulatory
guidance, such as handbooks, FAQs, internal memoranda, and press releases, presents a unique challenge to compliance efforts. Such sub-regulatory guidance purports to explain validly promulgated regulations but often expands or supplements existing regulations without constitutionally and statutorily required notice and comment and other procedural protections. Without procedural protections, sub-regulatory guidance poses a risk above and beyond reasonable efforts to follow validly promulgated regulations, particularly when the agency or MAC seeking to enforce such sub-regulatory guidance is not the agency or MAC issuing the guidance and therefore not as familiar with the substance and nature of the underlying regulations or even clinical issues involved.
Additionally, the federal government is increasingly turning to statistical sampling and extrapolation to expand claims denials and enforcement efforts and advocate for changes in reimbursement policy. Through sampling and extrapolation, the government takes a review of a small number of reimbursement claims and generalizes the results of that review to a much broader universe of claims, which can result in significant increases in the aggregate number and value of claims at issue. Increasing use of extrapolation can be found in payment review audits, such as those conducted by RACs and UPICs. In addition to payment reviews, government agencies may allege compliance violations, including submission of false claims, based on sampling and extrapolation and seek to change reimbursement policy. For example, the HHS-OIG issued a report in September 2018 purporting to identify a high error rate (approximately 80% of claims) among inpatient rehabilitation hospital admissions in a small sample of 220 claims. Based on its findings, the HHS-OIG extrapolated the error rate to the universe of inpatient rehabilitation claims and, among other things, recommended reevaluation of the IRF-PPS. However, the HHS-OIG report involves an extremely small sample size, is not a random sample of cases, includes incorrect references to coverage requirement regulations, appears to conflate technical documentation requirements with medical necessity determinations, and is at odds with actual MAC reviews of claims during that same timeframe which found substantially lower error rates. Notwithstanding the technical statistical flaws that can arise in sampling small groups of claims and the extremely problematic nature of extrapolation in the context of individualized decisions of medical judgment as some courts have noted, sampling and extrapolation pose a growing risk to healthcare providers in the form of more significant claims of overpayments and increased legal costs to defend against these problematic regulatory practices. The Fifth Circuit Court of Appeals has ruled in favor of CMS and affirmed the application of extrapolation errors identified in a sample of claims to support larger claims for overpayment. As discussed under “Reimbursement Risks” above, we are currently challenging, among other things, the use of extrapolation in a 2017 UPIC audit. Any associated loss of revenue or increased legal costs could materially and adversely affect our financial position, results of operations, and cash flows.
Efforts to comply with regulatory mandates to increase the use of electronic health data and health system interoperability may lead to enforcement and negative publicity which could adversely affect our business.
For many years, a primary focus of the healthcare industry has been to increase the use of electronic health records, or “EHR,” and the sharing of the health data among providers, payors and other members of the industry. The federal government has been a significant driver of that initiative through rules and regulations. In 2009, as part of the Health Information Technology for Economic and Clinical Health (“HITECH”) Act, the federal government set aside $27 billion of incentives for acute-care hospitals and other providers, not including IRFs, to adopt EHR systems. In 2020, CMS and HHS’s Office of the National Coordinator for Health IT (“ONC”) finalized policy changes implementing interoperability, information blocking, and patient access provisions of the 21st Century Cures Act and supporting the MyHealthEData initiative, designed to allow patients to access their health claims information electronically through the application of their choosing. The companion rules regulate the way in which healthcare providers, health information technology developers, health information exchanges/health information networks (“HIEs/HINs”), and health plans share patient information. For example, the ONC rule prohibits healthcare providers, health IT developers, and HIEs/HINs from engaging in practices that are likely to interfere with, prevent, materially discourage, or otherwise inhibit the access, exchange or use of electronic health information, also known as “information blocking.” The ONC rule also requires regulated actors to respond to requests for electronic health information in the content and manner requested, with some exceptions. Noncompliance with ONC’s and CMS’ health information access rules can result in civil monetary penalties, exclusion from participation in federal health care programs and other appropriate “disincentives,” including reductions in Medicare reimbursements. The United States Department of Health and Human Services Office of Civil Rights (“HHS-OCR”) patient right of access initiative, which has similar objectives to the ONC initiative, such as promoting and enforcing patient access to health information, has led to dozens of settlements of enforcement actions.
The goals of increased use of electronic health data and interoperability are improved quality of care and lower healthcare costs generally. However, increased use of electronic health data and interoperability inherently magnifies the risk of security breaches involving that data and information systems used to share it, which risk is discussed under “Other Operational Risks” below. Additionally, interoperability and the sharing of health information have received increasingly negative publicity. There is at least one well publicized instance where organizations received significant negative publicity for sharing health data despite having appeared to comply in all respects with privacy law. There can be no assurance that our efforts to improve the
care we deliver and to comply with the law through increasing use of electronic data and system interoperability will not receive negative publicity that may materially and adversely affect our ability to get patient referrals or enter into joint ventures with other providers or may lead to greater regulatory scrutiny. Negative publicity may also lead to federal or state regulation that conflicts with current federal policy and interferes with the healthcare industry’s efforts to improve care and reduce costs through use of electronic data and interoperability.
If any of our hospitals fail to comply with the Medicare enrollment requirements or conditions of participation, that hospital could be terminated from the Medicare program.
Each of our hospitals must comply with extensive enrollment requirements and conditions of participation for the Medicare program. If any of our hospitals fail to meet any of the Medicare enrollment requirements or conditions of participation, we may receive a notice of deficiency from the applicable survey agency or contractor, as applicable. If that hospital then fails to institute an acceptable plan of correction and correct the deficiency within the applicable correction period, it could lose the ability to bill Medicare. A hospital could be terminated from the Medicare program if it fails to address the deficiency within the applicable correction period. If CMS terminates one hospital, it may increase its scrutiny of others under common control. From time to time, we have individual hospitals that receive notices of deficiency, some of which are triggered by adverse care incidents or patient complaints. To date, we have addressed those as they have arisen, and we have not experienced a termination.
In September 2019, CMS released a final rule adding additional provider enrollment provisions and creating several new revocation and denial authorities in an attempt to bolster CMS’ efforts to prevent waste, fraud and abuse. This rule requires Medicare and Medicaid providers and suppliers to disclose any current or previous (in the last five years), direct or indirect affiliation with a provider or supplier that has ever had a disclosable event. A disclosable event is any uncollected debt to Medicare or Medicaid, payment suspension under a federal health care program, denial, revocation or termination of enrollment (even if it is under appeal), or exclusion by the HHS-OIG from participation in a federal health care program. The rule also broadens the definition of an affiliation, including many indirect ownership or control situations such as ownership interests in a publicly traded company. If CMS determines an affiliation with a disclosable event poses an undue risk of fraud, waste or abuse, then the provider reporting that affiliation may be subject to exclusion from Medicare. Currently, information regarding uncollected debt, payment suspensions and enrollment actions are not generally available, so obtaining such information on affiliates could prove difficult or impossible in some situations.
Under this rule, CMS may revoke a provider’s Medicare enrollment, including all of the provider’s locations, if the provider bills for services performed at, or items furnished from, one location that it knew or should have known did not comply with Medicare enrollment requirements, including making the disclosures discussed above. CMS has the ability to prevent applicants from enrolling in the program for up to three years if a provider is found to have submitted false or misleading information in its initial enrollment application. Additionally, CMS can now block providers and suppliers who are revoked from re-entering the Medicare program for up to 10 years. CMS may also revoke a provider’s enrollment if it fails to report on a timely basis any change in ownership or control, revocation or suspension of a federal or state license or certification, or any other change in its enrollment data.
Any termination of one or more of our hospitals from the Medicare program for failure to satisfy the enrollment requirements or conditions of participation could materially adversely affect our business, financial position, results of operations, and cash flows.
If we are found to have violated applicable privacy and information security laws and regulations or our contractual obligations, we could be subject to sanctions, fines, damages and other civil or criminal penalties, which could increase our liabilities, harm our reputation and have a material adverse effect on our business, financial position, results of operation and liquidity.
There are a number of federal, state and local laws, rules and regulations, as well as contractual obligations, relating to the protection, collection, storage, use, retention, security, disclosure, transfer and other processing of confidential, sensitive and personal information, including protected health information (“PHI”), such as patient medical records. There are also foreign laws, rules and regulations that address these matters and have extraterritorial application. We do not believe we are currently subject to these non-United States regulatory regimes but that could change in the future. Existing laws and regulations are constantly evolving, and new laws and regulations that apply to our business are being enacted at every level of government in the United States. In many cases, these laws and regulations apply not only to third-party transactions, but also to transfers of information between or among us, our affiliates and other parties with whom we conduct business. These laws and regulations may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may have a material adverse effect on our business. We monitor legal developments in data privacy and security regulations at the local, state and federal level, however, the regulatory framework for data privacy and
security worldwide is continuously evolving and developing and, as a result, interpretation and implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future.
The management of PHI is subject to several regulations at the federal level, including the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the HITECH Act. The HIPAA privacy and security regulations protect medical records and other PHI by limiting their use and disclosure, giving individuals the right to access, amend, and seek accounting of their own health information, and limiting most uses and disclosures of health information to the minimum amount reasonably necessary to accomplish the intended purpose. The HITECH Act strengthened HIPAA enforcement provisions and authorized state attorneys general to bring civil actions for HIPAA violations. It also permits HHS to conduct audits of HIPAA compliance and impose significant civil monetary penalties even if we did not know and could not reasonably have known about a violation. If we are found to have violated the HIPAA privacy or security regulations or other federal or state laws protecting the confidentiality of patient health or personal information, including but not limited to the HITECH Act, we could be subject to litigation, sanctions, fines, damages and other civil or criminal penalties, which could increase our liabilities, harm our reputation, and have a material adverse effect on our business, financial position, results of operations and liquidity.
Numerous other federal and state laws protect the confidentiality, privacy, availability, integrity and security of PHI. In recent years, many states have implemented privacy laws and regulations that impose restrictive requirements regulating the use and disclosure of personally identifiable information, which may include PHI. These laws in many cases are more restrictive or impose more obligations than, and are not preempted by, the HIPAA rules, apply to employees and business contacts as well as patients, and may be subject to new and varying interpretations by courts and government agencies, creating complex compliance issues and potentially exposing us to additional expense, adverse publicity and liability. We expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. The U.S. Congress has considered, but not yet passed, several comprehensive federal data privacy bills over the past few years, such as the CONSENT Act, which was intended to be similar to the landmark 2018 European Union General Data Protection Regulation. We expect federal data privacy laws to continue to evolve.
In the absence of comprehensive federal laws on data privacy and artificial intelligence, there is increased focus at the state and local level on regulating the collection, storage, use, retention, security, disclosure, transfer and other processing of confidential, sensitive and personal information and the use of artificial intelligence. In recent years, we have seen significant changes to data privacy and artificial intelligence regulations across the United States. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to confidential, sensitive and personal information than federal, international or other state laws, and such laws may conflict with each other, which significantly complicates compliance efforts.
In addition, all 50 U.S. states and the District of Columbia have enacted breach notification laws that may require us to notify patients, employees, third parties, regulators and the general public in the event of unauthorized access to or disclosure of personal or confidential information experienced by us or our service providers. These laws are not consistent, and compliance in the event of a widespread data breach is difficult and may be costly. Moreover, states frequently amend existing laws, requiring attention to changing regulatory requirements.
We also may be contractually required to notify patients or other counterparties of a security breach. Although we have contractual protections with many of our service providers, any actual or perceived security breach could harm our reputation and brand, expose us to potential liability or require us to expend significant resources on data security and in responding to any such actual or perceived breach, including defending class action litigation. Any contractual protections we have from our service providers may not be sufficient to adequately protect us from any such liabilities and losses, and we may be unable to enforce any such contractual protections.
In addition to government regulation, privacy advocates and industry groups have and may in the future propose self-regulatory standards from time to time. These and other industry standards may legally or contractually apply to us, or we may elect to comply with such standards.
Complying with these various laws, rules, regulations and standards could cause us to incur substantial costs that are likely to increase over time, require us to change our business practices in a manner adverse to our business, divert resources from other initiatives and projects, and restrict the way products and services involving data are offered, all of which may have a material adverse effect on our business. Given the rapid development of cybersecurity, data privacy, and artificial intelligence laws, we expect to encounter inconsistent interpretation and enforcement of these laws and regulations, as well as frequent changes to these laws and regulations which may expose us to significant penalties or liability for noncompliance, the possibility of fines, lawsuits (including class action privacy litigation), regulatory investigations, criminal or civil sanctions, audits, adverse media coverage, public censure, other claims, significant costs for remediation and damage to our reputation, or otherwise have a material adverse effect on our business and operations. Any allegations of a failure to adequately address data
privacy or security-related concerns, even if unfounded, or to comply with applicable laws, regulations, standards and other obligations relating to data privacy and security and the use of artificial intelligence, could result in additional cost and liability to us, damage our relationships with patients and business partners and have a material adverse effect on our business.
We make public statements about our use and disclosure of personal information through our privacy policies, information provided on our website and press statements. Although we endeavor to comply with our public statements and documentation about patient privacy, we may at times fail to do so or be accused of having failed to do so. The publication of our privacy policies and other statements that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices. Moreover, from time to time, concerns may be expressed about whether our services or business practices, including the use of artificial intelligence, compromise the privacy of patients and others. Any concerns about our data privacy and security practices, even if unfounded, could damage the reputation of our businesses, discourage potential patients from seeking our services and have a material adverse effect on our business.
We are subject to federal, state and local laws and regulations that govern our employment practices, including minimum wage, overtime, living wage and paid-time-off requirements. Failure to comply with these laws and regulations, or changes to these laws and regulations that increase our employment-related expenses, could adversely impact our operations.
We are required to comply with all applicable federal, state and locals laws and regulations relating to employment, including occupational safety and health requirements, minimum staffing, wage and hour, overtime and other compensation requirements, employee benefits and other leave and sick pay requirements, proper classification of workers as employee or independent contractors, and immigration and equal employment opportunity laws, among others. These laws and regulations can vary significantly among jurisdictions, can change, and can be highly technical and involve strict liability for noncompliance with a seemingly mundane technical detail. Costs and expenses related to these requirements are a significant operating expense and may increase as laws and regulations change. From time to time, we have been, and expect to continue to be, subject to regulatory proceedings and private litigation, including putative class and collective action lawsuits, concerning our application of various laws, rules and regulations governing employment practices, including wage and hour claims. Some of these actions involve large demands, as well as substantial defense costs. Any failure to comply with these employment-related legal requirements can result in significant penalties or litigation exposure and could have a material adverse effect on our business, financial position, results of operations, and cash flows.
The pricing transparency and similar consumer protection rules could adversely affect our business and results of operations.
The CMS hospital price transparency rule requires hospitals to publish on the internet in a consumer-friendly format their standard charges based on negotiated rates for all items and services and up to 300 common shoppable services. Shoppable services are those routinely provided in non-urgent situations and include those ancillary services that customarily accompany the primary service being provided. The charges for an individual item or service to be published include:
•gross charge (charge as reflected on a hospital’s chargemaster, absent any discounts),
•payer-specific negotiated charge (charge negotiated with a third party payer for an item or service),
•de-identified minimum negotiated charge (lowest charge negotiated with all third-party payers),
•de-identified maximum negotiated charge (highest charge negotiated with all third-party payers), and
•discounted cash price (charge that applies to an individual who pays cash).
Effective July 1, 2024, CMS finalized a requirement for hospitals to display their standard charge information by conforming to a CMS template layout, data specifications, and data dictionary, and to improve accessibility of the data on their websites. Hospitals are required to encode standard charge information in the CMS templates. This transparency rule imposes significant initial and ongoing burdens on hospitals to track and publish various billing information. In the event a hospital fails to comply with the new requirements and does not complete the prescribed corrective action, CMS may impose a civil monetary penalty of between $300 and $5,500 per day. The maximum penalty for violations is more than $2 million per hospital.
The federal No Surprises Act imposes additional price transparency requirements, including requiring hospitals to send uninsured or self-pay patients a good faith estimate of the expected charges for treatments, including for attending physicians billing separately, prior to the scheduled stay or upon request. If an uninsured or self-pay patient receives a bill that is substantially greater than the expected charges in the estimate or the provider furnishes an item or service that was not included
in the estimate, the patient may initiate a patient-provider dispute resolution process established by regulation. Additionally, HHS may impose penalties of up to $10,000 per violation of the No Surprises Act.
In January 2026, President Trump announced his intent to advance a healthcare bill to further pricing transparency. Many states have also passed or are debating legislation establishing price transparency websites, mandating that health plans or hospitals make price information available to consumers, or prohibiting practices associated with surprise billing. These requirements and restrictions vary from state to state. We cannot predict what the adverse effects, if any, of new federal or state pricing transparency and other consumer protection laws or regulations, such as the effect on relations with managed care payors and referral sources, may be for us. Our failure to maintain compliance with these rules could adversely affect our financial position, results of operations, and cash flows.
Other Operational Risks
The proper function, availability, and security of our information systems are critical to our business and failure to maintain proper function, availability, or security of our information systems or protect our data against unauthorized access could have a material adverse effect on our business, financial position, results of operations, and cash flows.
We are and will remain dependent on the proper function, availability and security of our and third-party information systems, including our electronic clinical information system, referred to as ACE-IT, which plays a substantial role in the operations of the hospitals, and on the cloud and other information technology service providers we directly and indirectly use. We undertake measures to protect the safety and security of our information systems and the data maintained within those systems, and we periodically test the adequacy of our security, business continuity, and disaster recovery measures. We have implemented administrative, technical and physical controls on our systems and devices in an attempt to prevent unauthorized access to that data, which includes patient information subject to the protections of HIPAA and the HITECH Act and other sensitive information. For additional discussion of these laws see Item 1, Business, “Regulation” and our cybersecurity program see Item 1C, Cybersecurity.
We expend significant capital to protect against cybersecurity threats, including denial of service attacks, email phishing schemes, hacking, advanced persistent threats, malware, and ransomware. Substantial additional expenditures may be required to respond to and remediate any problems caused by breaches, including the unauthorized access to or theft of patient data and protected health information stored in our information systems and the introduction of computer malware or ransomware to our systems. We also provide our employees annual training and regular reminders on important measures they can take to prevent breaches and other cyber threats, including phishing schemes. We routinely identify attempts to gain unauthorized access to our systems. However, given the rapidly evolving nature and proliferation of cyber threats, there can be no assurance our training and network security measures or other controls will detect, prevent or remediate security or data breaches in a timely manner or otherwise prevent unauthorized access to, damage to, or interruption of our systems and operations. For example, it has been widely reported that many well-organized international interests, in certain cases with the backing of sovereign governments, are targeting the theft of patient information and the disruption of healthcare services through the use of advanced persistent threats and ransomware attacks. In recent years, a number of hospitals and hospital systems have reported being victims of ransomware attacks in which they lost access to their systems, including clinical systems, during the course of the attacks. Large, national healthcare systems have reported ransomware attacks that forced their facilities to operate without access to information systems for some time and, to some extent, inhibited their ability to admit patients. We are likely to face attempted attacks in the future. Accordingly, we may be vulnerable to losses associated with the improper functioning, breach or unavailability of our and our vendors’ information systems, including systems used in acquired operations, and third-party systems we use.
Threat actors continue to attempt to exploit commonly used software and services to gain remote access to a large number of the information systems of the businesses using the software and services. For example, in December 2021, widespread exploitation of a vulnerable logging software installed within commonly used applications, services, and websites gave threat actors the ability to execute code remotely and potentially take control of affected systems. In May 2023, an international ransomware group began exploiting a vulnerability in a prevalent enterprise file transfer tool allowing the group to steal data from thousands of government, public, and business organizations worldwide.
Generally, we, working with our cybersecurity vendors, attempt to monitor various channels and sources to identify vulnerabilities and threats in both third-party vendor software and services as well as our own systems and to mitigate the risks promptly. We also routinely work with industry and governmental cybersecurity partners to identify and combat cyber threats, which are particularly acute in the healthcare industry. When we become aware of threats, we undertake forensic investigations of our systems using all the indicators of compromise identified by leading security experts. Our forensic analysis to date has discovered no indicators of compromise. There can be no assurance that we will identify or adequately mitigate all threats to
our systems, particularly in light of the number of well-funded and organized threat actors working to attack healthcare providers and the possibility of zero-day vulnerabilities and exploits yet to be identified.
To date, we are not aware of having experienced a material compromise from a cyber breach or attack. However, given the increasing cybersecurity threats in the healthcare industry, there can be no assurance we will not experience business interruptions; data loss, ransom, misappropriation or corruption, theft, or misuse of proprietary data, patient or other personally identifiable information; or litigation, investigation, or regulatory action related to any of those, any of which could have a material adverse effect on our patient care, ability to admit patients, financial position, and results of operations and harm our business reputation. Moreover, a security breach, or threat thereof, could require that we expend significant resources to repair or improve our information systems and infrastructure and could distract management and other key personnel from performing their primary operational duties. In the case of a material breach or cyber attack, the associated expenses and losses may exceed our current insurance coverage for such events. Some adverse consequences may not be insurable, such as reputational harm and third-party business interruption. Failure to maintain proper function, security, or availability of our information systems or protect our data against unauthorized access could have a material adverse effect on our business, financial position, results of operations, and cash flows. In addition, costs, unexpected problems, and interruptions associated with the implementation or transition to new systems or technology or with adequate support of those systems or technology across numerous hospitals could have a material adverse effect on our business, financial position, results of operations, and cash flows.
The failure of our business partners and vendors to maintain the proper function, availability, or security of their information systems or to protect against unauthorized access could have a material adverse effect on our business, financial position, results of operations, and cash flows.
Our business involves sharing of protected health information and other sensitive information among employees and with third-parties, including acute-care hospitals, which are typically referral sources, healthcare service and information vendors, and the federal government, our primary payor. In fact, federal laws and regulations require interoperability among healthcare entities in many circumstances. The use by our employees and healthcare partners of portable devices to facilitate patient care increases the risk of loss, theft or inadvertent disclosure of that information. A compromise of the network security measures or other controls of those businesses, vendors, or governmental agencies and their contractors with whom we interact, including our direct and indirect cloud service providers and CMS, which results in confidential information being accessed, obtained, damaged or used by unauthorized persons, or unavailability of systems necessary to the operation of our business, could impact patient care, claims billing and collection, harm our reputation, and expose us to significant remedial costs as well as regulatory actions (fines and penalties) and claims from patients, financial institutions, regulatory and law enforcement agencies, and other persons, any of which could have a material adverse effect on our business, financial position, results of operations and cash flows.
ACE-IT, our enterprise-level clinical information system, is subject to a licensing, implementation, technology hosting, and support agreement with Oracle Health. In addition, we have a number of partners and non-software vendors with whom we share data in order to provide patient care and otherwise operate our business. Our inability, or the inability of our partners or vendors, to continue to secure, maintain and upgrade information systems, software, and hardware could disrupt or reduce the efficiency of our operations, including affecting patient care. On February 21, 2024, Change Healthcare, a subsidiary of UnitedHealth Group that acts as an intermediary for processing of our payment claims for all payors, notified us of a cybersecurity incident affecting some of its systems. In response to the incident, both we and Change Healthcare severed those business service connections between our systems and Change Healthcare’s. We promptly conducted forensics on our systems based on the shared information regarding this Change Healthcare incident and did not identify any compromise or unauthorized access of our systems or networks. However, the incident did affect our ability to submit any claims for payment for a period of time until we implemented alternative modes for submissions. We have not identified any compromise or unauthorized access of our systems or networks, and the temporary disruption to our submission of claims did not materially affect our business strategy, results of operation or financial condition. A security breach or other system failure involving Oracle Health, Change Healthcare, or another third-party with whom we share data or system connectivity could compromise our patient data or proprietary information or disrupt our ability to operate, including submitting claims for payment, any of which could have a material adverse effect on our business, financial position, results of operations and cash flows.
We face intense competition for patients from other healthcare providers.
We operate in the competitive, fragmented inpatient rehabilitation industry. Although we are the nation’s largest owner and operator of inpatient rehabilitation hospitals in terms of patients treated, revenues, and number of hospitals, in any particular market we may encounter competition from local or national entities with longer operating histories or other competitive advantages. For example, acute-care hospitals, including those owned and operated by large public companies, may choose to expand or begin offering post-acute rehabilitation services. Given that approximately 92% of our hospitals’ admissions come from acute-care hospitals, that increase in competition could materially and adversely affect our admission
referrals in the related markets. There are also large acute-care systems that may have more resources available to compete than we have. Other providers of post-acute care services may attempt to become competitors in the future. For example, nursing homes frequently market themselves as offering certain rehabilitation services, even though nursing homes are not required to offer the same level of care, and are not licensed, as hospitals.
Competing companies may offer newer or different services from those we offer or have better relationships with referring physicians and may thereby attract patients who are presently, or would be candidates for, receiving our inpatient rehabilitation services. The other public companies and large health insurance companies expanding into post-acute care have or may obtain significantly greater marketing and financial resources or other advantages of scale than we have or may obtain. Other companies, including hospitals and other healthcare organizations that are not currently providing competing services, may expand their services to include inpatient rehabilitation services.
There can be no assurance this competition, or other competition which we may encounter in the future, will not adversely affect our business, financial position, results of operations, or cash flows. In addition, from time to time, there are efforts in states with certificate of need (“CON”) laws to weaken those laws, which could potentially increase competition in those states. For example, in 2023, South Carolina enacted legislation to repeal CON regulations for several provider types, including IRFs. Conversely, competition and statutory procedural requirements in some CON states may inhibit our ability to expand our operations in those states. For a breakdown of the CON status of the states and territories in which we have operations, see Item 2, Properties.
If we are unable to provide a consistently high quality of care, our business will be adversely impacted.
Providing quality patient care is fundamental to our business. We believe hospitals, physicians and other referral sources refer patients to us in large part because of our reputation for delivering quality care. Clinical quality is becoming increasingly important within our industry. Effective October 2012, Medicare began to impose a financial penalty upon acute-care hospitals that have excessive rates of patient readmissions within 30 days from hospital discharge. We believe this regulation provides a competitive advantage to post-acute providers who can differentiate themselves based upon quality, particularly by achieving low acute-care hospital readmission rates and by implementing disease management programs designed to be responsive to the needs of patients served by referring hospitals. If we should fail to attain our goals regarding acute-care hospital readmission rates and other quality metrics or we experience negative publicity alleging deficient patient care, our ability to generate referrals may be adversely impacted, which may have a material adverse effect upon our business and consolidated financial condition, results of operations, and cash flows.
If we are unable to maintain or develop relationships with patient referral sources, our growth and profitability could be adversely affected.
Our success depends in large part on referrals from physicians, hospitals, case managers and other patient referral sources in the communities we serve. By law, referral sources cannot be contractually obligated to refer patients to any specific provider. However, there can be no assurance that individuals will not attempt to steer patients to competing post-acute providers or otherwise limit our access to potential referrals. The establishment of joint ventures or networks between referral sources, such as acute-care hospitals, and other post-acute providers may hinder patient referrals to us. The growing emphasis on integrated care delivery across the healthcare continuum increases that risk.
Our growth and profitability depend on our ability to establish and maintain close working relationships with patient referral sources and to increase awareness and acceptance of the benefits of inpatient rehabilitation care by our referral sources and their patients. We cannot provide assurance that we will be able to maintain our existing referral source relationships or that we will be able to develop and maintain new relationships in existing or new markets. Our loss of, or failure to maintain, existing relationships, including because of closures of referral sources in concentrated markets, or our failure to develop new relationships could adversely affect our ability to grow our business and operate profitably.
We may have difficulty completing joint ventures, investments and transactions that increase our capacity consistent with our growth strategy.
We may selectively pursue strategic acquisitions of, and we frequently pursue joint ventures with, other healthcare providers. We may face limitations on our ability to identify sufficient joint venture, acquisition or other development targets and to complete those transactions to meet goals.
In the inpatient rehabilitation industry, the costs of constructing new hospitals are increasing faster than reimbursement rates and the general inflation rate. In many states, the need to obtain governmental approvals, such as a CON or an approval of a change in ownership, may represent a significant obstacle to completing transactions. Additionally, in states with CON laws,
it is not unusual for third-party providers to challenge the initial awards of CONs, the increase in the number of approved beds in an existing CON, or the expansion of the area served, and the adjudication of those challenges and related appeals may take many years.
Changes in federal laws or regulations may also materially adversely impact our ability to acquire hospitals or open de novo hospitals. In recent years, the Federal Trade Commission and DOJ have been aggressive in challenging mergers and acquisitions they believe present antitrust concerns and in asserting novel legal arguments for what constitutes unlawful anticompetitive activity. Continued aggressive federal enforcement of antitrust laws would likely increase the time, effort, and expense associated with acquisitions and may ultimately make it less likely to consummate acquisitions.
These factors and others may delay, or increase the cost to us associated with, any acquisition or de novo development or prevent us from completing one or more acquisitions or de novo developments.
Acute-care hospitals that participate in joint ventures with us may experience operational or financial challenges that, in turn, affect our joint venture inpatient rehabilitation hospitals.
We currently have 67 inpatient rehabilitation hospitals that are owned and operated as joint ventures with acute-care hospitals. In substantially all of these joint ventures, our co-owners are nonprofit hospitals or health systems. The healthcare provider operating environment has become increasingly challenging in recent years because of inflationary pressures, (particularly labor costs), reimbursement pressures, tight credit markets with increasing interest rates, and other operational challenges such as clinical staffing shortages and shifts of some types of care delivery away from the acute-care setting. The continuation of some or all of these conditions together with general weakening economic conditions and increasing federal and state limitations on strategic combinations could subject our joint venture partners to significant operational and financial pressures.
The financial and operational strength, access to credit, and general liquidity of a joint venture partner may affect the growth or performance for the associated inpatient rehabilitation hospital, and in a few instances in the past has done so. Our joint venture partners may be, and in the past some have been, unable or unwilling, at the time of our request, to make capital contributions to fund their proportional shares of operating or capital expenditures that we believe are in the best interest of the joint ventures. The delay or inability of a joint venture to undertake a funding expenditure could affect the growth or performance of that hospital. Should a joint venture partner close its acute-care hospital operating in the market with the joint venture inpatient rehabilitation hospital, we would likely suffer a significant referral disruption or decrease in that market, particularly in smaller markets where the acute-care hospital that is closing is the primary or only hospital.
We have a small number of inpatient rehabilitation hospitals that are located within our joint venture partner’s acute-care hospital. In January 2024, we received notice that one of our joint venture partners intended to close its acute-care hospital in which the joint venture inpatient rehabilitation hospital was located. Consequently, we closed that joint venture hospital and incurred a one-time charge of $1.8 million, net of tax and noncontrolling interest, in the first quarter of 2024.
Any of these occurrences or similar occurrences affecting a number of our joint ventures could, in the aggregate, have a material adverse impact on our business and consolidated financial condition, results of operations, and cash flows.
We may make investments or complete transactions that could expose us to unforeseen risks and liabilities.
Investments, acquisitions, joint ventures or other development opportunities identified and completed may involve material cash expenditures, debt incurrence, operating losses, amortization of certain intangible assets of acquired companies, issuances of equity securities, liabilities, and expenses, some of which are unforeseen, that could materially and adversely affect our business, financial position, results of operations and liquidity. Acquisitions, investments, and joint ventures involve numerous risks, including:
•limitations, including state CONs as well as anti-trust, Medicare, and other regulatory approval requirements, on our ability to complete such acquisitions, particularly those involving not-for-profit providers, on terms, timetables, and valuations reasonable to us;
•difficulties integrating acquired operations, personnel, and information systems, and in realizing projected revenues, efficiencies and cost savings, or returns on invested capital;
•entry into markets, businesses or services in which we may have little or no experience;
•diversion of business resources or management’s attention from ongoing business operations; and
•exposure to undisclosed or unforeseen liabilities of acquired operations, including liabilities for failure to comply with healthcare laws and anti-trust considerations as well as risks and liabilities related to previously compromised information systems.
As part of our development activities, we intend to open new, or de novo, inpatient rehabilitation hospitals. The construction of new hospitals involves numerous risks, including the receipt of all zoning and other regulatory approvals, such as a CON where necessary, construction delays and cost over-runs and unforeseen environmental liability exposure. Once built, new hospitals must undergo the state and Medicare certification process, the duration of which may be beyond our control. We may be unable to operate newly constructed hospitals as profitably as expected, and those hospitals may involve significant additional cash expenditures and operating expenses that could, in the aggregate, have an adverse effect on our business, financial position, results of operations, and cash flows.
We may not be able to successfully integrate acquisitions or realize the anticipated benefits of any acquisitions.
We may undertake strategic acquisitions from time to time. Prior to consummation of any acquisition, the acquired business will have operated independently of us, with its own procedures, corporate culture, locations, employees and systems. We expect to integrate acquired businesses into our existing business utilizing certain common information systems, operating procedures, administrative functions, financial and internal controls and human resources practices to the extent practicable. There may be substantial difficulties, costs and delays involved in the integration of an acquired business with our business. Additionally, an acquisition could cause disruption to our business and operations and our relationships with customers, employees and other parties. In some cases, the acquired business has itself grown through acquisitions, and there may be legacy systems, operating policies and procedures, and financial and administrative practices yet to be fully integrated. To the extent we are attempting to integrate multiple businesses at the same time, we may not be able to do so as efficiently or effectively as we initially anticipate. The failure to successfully integrate on a timely basis any acquired business with our existing business could have an adverse effect on our business, financial position, results of operations, and cash flows.
We anticipate our acquisitions will result in benefits including, among other things, increased revenues. However, acquired businesses may not contribute to our revenues or earnings to the extent anticipated, and any synergies we expect may not be realized after the acquisitions have been completed. If the acquired businesses underperform and any underperformance is other than temporary, we may be required to take an impairment charge. Failure to achieve the anticipated benefits could result in the diversion of management’s time and energy and could have an adverse effect on our business, financial position, results of operations, and cash flows.
Competition for staffing, shortages of qualified personnel, union activity or other factors may increase our staffing costs and reduce profitability.
Our operations are dependent on the efforts, abilities, and experience of our medical personnel, such as physical therapists, occupational therapists, speech pathologists, nurses, and other healthcare professionals. We compete with other healthcare providers in recruiting and retaining qualified personnel responsible for the daily operations of each of our locations. The lack of availability of clinical personnel is a significant ongoing operating issue facing healthcare providers and unexpected labor market disruptions, like the COVID-19 pandemic, can exacerbate the issue. The operating conditions associated with the pandemic significantly affected the availability and turnover of clinical staff and, in turn, increased staffing costs. Availability of clinical staff, elevated turnover and staffing costs continue to be a challenge for us and other healthcare providers. The availability of staff may be exacerbated if immigration is significantly limited in the future. Staffing shortages or retention concerns in one or more markets in which we operate have required and may again require us to enhance wages and benefits to recruit and retain qualified personnel or to contract for more expensive temporary personnel. We also depend on the available labor pool of semi-skilled and unskilled employees in each of the markets in which we operate. While we do not employ physicians, we do rely on the availability of physicians to treat patients in our hospitals. The lack of physicians qualified to treat rehabilitation patients in a market may limit our ability to admit patients or affect our billing for services provided.
If our staffing costs increase, we may not experience reimbursement rate or pricing increases to offset these additional costs. Because a significant percentage of our revenues consists of fixed, prospective payments, our ability to pass along increased staffing costs is limited. In particular, if staffing costs rise at an annual rate greater than our net annual market basket update from Medicare, as occurred in 2022 and 2023, or we experience a significant shift in our payor mix to lower rate payors such as Medicaid, our results of operations and cash flows will be adversely affected. Conversely, decreases in reimbursement revenues, such as with sequestration, may limit our ability to increase compensation or benefits to the extent necessary to retain key employees, in turn increasing our turnover and associated costs. Union activity is another factor that may contribute to increased staffing costs. We currently have a minimal number of union employees, so an increase in labor union activity could
have a significant impact on our staffing costs. Our failure to recruit and retain qualified clinical personnel, or to control our staffing costs, could have a material adverse effect on our business, financial position, results of operations, and cash flows.
We are a defendant in various lawsuits, and may be subject to liability under qui tam cases, the outcome of which could have a material adverse effect on us.
We operate in a highly regulated industry in which healthcare providers are routinely subject to litigation. As a result, various lawsuits, claims, and legal and regulatory proceedings have been and can be expected to be instituted or asserted against us. We are a defendant in a number of lawsuits, most of which are either general and professional liability matters inherent in treating patients with challenging medical conditions or labor and employment matters inherent in employing over 40,000 people. Our more significant lawsuits and investigations, if any, are discussed in Note 16, Contingencies and Other Commitments, to the accompanying consolidated financial statements.
Substantial damages, fines, or other remedies assessed against us or agreed to in settlements could have a material adverse effect on our business, financial position, results of operations, and cash flows, including indirectly as a result of the covenant defaults under our credit agreement or debt instruments or other claims such as those in securities actions. Additionally, the costs of defending litigation and investigations, even if frivolous or nonmeritorious, could be significant.
The FCA allows private citizens, called “relators,” to institute civil proceedings on behalf of the United States alleging violations of the FCA. These lawsuits, also known as “whistleblower” or “qui tam” actions, can involve significant monetary damages, fines, attorneys’ fees and the award of bounties to the relators who successfully prosecute or bring these suits to the government. Qui tam cases are sealed at the time of filing, which means knowledge of the information contained in the complaint typically is limited to the relator, the federal government, and the presiding court. The defendant in a qui tam action may remain unaware of the existence of a sealed complaint for years. While the complaint is under seal, the government reviews the merits of the case and may conduct a broad investigation and seek discovery from the defendant and other parties before deciding whether to intervene in the case and take the lead on litigating the claims. The court lifts the seal when the government makes its decision on whether to intervene. If the government decides not to intervene, the relator may elect to continue to pursue the lawsuit individually on behalf of the government. The number of qui tam suits has been growing rapidly in recent years, with both 2024 and 2025 setting new records for filings.
In 2019, we settled with DOJ to conclude an investigation that originated in 2013 based on the allegations made by relators. The seven-year investigation produced no evidence of falsity or fraudulent conduct. Eventually, the court overseeing the qui tam actions refused to give DOJ more time to decide whether to intervene and unsealed the cases. DOJ chose not to intervene and prosecute the matter. We settled the DOJ investigation, together with the related qui tam or “whistleblower” lawsuits, for a payment of $48 million, and we expressly denied any wrongdoing. Even when a matter is without merit, as we believe was the case with this investigation, we may still incur significant costs of defense or settlement costs or both.
It is possible that other qui tam lawsuits have been filed against us, which suits remain under seal, or that we are unaware of such filings or precluded by existing law or court order from discussing or disclosing the filing of such suits. We may be subject to liability under one or more undisclosed qui tam cases brought pursuant to the FCA.
The healthcare services we provide involve substantial risk of general and professional liability. Inpatient rehabilitative care involves three hours of daily intensive therapy for patients who are usually elderly and come to our hospitals with debilitating medical conditions. Our clinicians must frequently assist patients who have difficulty with mobility. We cannot predict the impact any claims arising out of the care being provided (regardless of their ultimate outcomes) could have on our business or reputation or on our ability to attract and retain patients and employees. We also cannot predict the adequacy of any reserves for such losses or recoveries from any insurance or re-insurance policies.
We self-insure a substantial portion of our professional, general, and workers’ compensation liability risks, which may not include risks related to regulatory fines and penalties, through our captive insurance subsidiary, as discussed further in Note 9, Self-Insured Risks, to the accompanying consolidated financial statements. Changes in the number of these liability claims and the cost to resolve them impact the reserves for these risks. A variance between our estimated and actual number of claims or average cost per claim could have a material impact, either favorable or unfavorable, on the adequacy of the reserves for these liability risks, which could have an effect on our financial position and results of operations.
Additionally, we operate in states in which the litigation environment may pose a significant business risk to us. For instance, we have been involved in lawsuits, including putative class actions, brought under California’s Private Attorneys General Act (“PAGA”). Under PAGA, individuals, including aggrieved employees, can bring individual or class-action claims alleging regulatory violations, including alleged violations of employment regulations. Additionally, judges and juries in California have demonstrated a willingness to grant large verdicts to plaintiffs in connection with employment and labor related
cases. In 2017, the California Supreme Court held that plaintiffs bringing suit under PAGA are generally entitled to request and receive a significant amount of information from the employer early in the litigation, which creates pressure for employers to settle early to avoid substantial litigation burdens and which has resulted in a significant increase in PAGA claims in recent years.
We may be more vulnerable to the effects of a public health emergency than other businesses due to the nature of our patients, and a regional or global socio-political, weather or other catastrophic event could severely disrupt our business.
A public health emergency can significantly affect healthcare providers because of the direct impacts on patients, capacity to accept patients, employees, necessary supplies to treat patients, and regulatory requirements related to the emergency. The COVID-19 pandemic and actions taken by local, state and federal authorities in response to the pandemic significantly affected our operations, business and financial condition. Future outbreaks of contagious diseases and associated governmental actions could adversely affect our operations, business and financial condition, including potentially our liquidity, particularly if the provision of healthcare services and the supplies for those services are disrupted for a lengthy period of time. The impact on our operations and financial performance depends on numerous factors, including the rate of spread, duration and geographic coverage of an outbreak; the rate and extent to which the disease mutates and the severity of the symptoms of the disease; the status of testing capabilities; the rates of vaccination and therapeutic remedies for the disease and any variant strains; the legal, regulatory and administrative developments related to the pandemic at federal, state, and local levels, such as vaccine mandates, anti-mandate laws and orders, shelter-in-place orders, facility closures and quarantines; and the infectious disease prevention and control efforts of the Company, governments and third parties.
The majority of our patients are elderly individuals with complex medical challenges, many of whom may be more vulnerable than the general public during a contagious disease outbreak or other public health catastrophe. Our employees also may be at greater risk of contracting contagious diseases due to their exposure to vulnerable patients. For example, if another pandemic were to occur, we could suffer significant losses to our patient population or a reduction in the availability of our employees and, at a high cost, be required to replace affected workers. Local, regional or national governments might limit or ban public interactions to halt or delay the spread of diseases causing business disruptions and the temporary suspension of our services. Accordingly, certain public health catastrophes could have a material adverse effect on our financial condition and results of operations.
Other unforeseen events, including acts of violence, war, terrorism and other international, regional or local instability or conflicts (including labor issues), embargoes, trade or tariff disputes, short-term and long-term weather-related events, natural disasters such as earthquakes, wildfires, and floods, whether occurring in the United States or abroad, could restrict or disrupt our operations and negatively affect our results of operations and cash flows. This risk is more acute in regions where we have a large number of hospitals, such as Texas and Florida, and in other coastal areas susceptible to tropical storms. For a list of the states in which we have hospital locations, see Item 2, Properties.
Regulatory and other efforts to promote a transition to a lower-carbon economy may result in significant operational and financial challenges for us.
Legislators and regulators at the international, national, regional and local levels have adopted and are expected to continue to adopt legal requirements ultimately designed to reduce greenhouse gas emissions and to promote a transition to a lower-carbon economy. For instance, a number of recently enacted laws and regulations impose on companies broad climate-related disclosure requirements, such as California’s suite of statutes adopted in 2023 known as the “climate accountability package,” to track and report matters associated with greenhouse gas emissions, alternative energy usage, energy conservation, and the transition to a lower-carbon economy. Additionally, a number of states and localities have passed building energy performance standards that impose reporting and energy use reduction obligations on commercial buildings, including our hospitals. These types of laws and regulations have proliferated in recent years and are likely to continue to do so in the future. These climate-related laws and regulations have increased our costs associated with compliance and are likely to continue to do so in the future. Additionally, the costs that other companies incur to comply with these types of laws and regulations are likely to be passed on to us, which would increase the cost of the goods and services that we purchase from vendors and suppliers. These legal requirements, as well as challenges associated with consumer, investor or lender pressure to change business models and practices, may also lead one or more of our vendors or suppliers to alter, disrupt or cease operations, which may adversely affect our operations. Furthermore, we, as well as our vendors and suppliers, may be required to adopt alternative energy sources or technology that may not yet be reliable or cost effective, which may result in disruptions to our operations. In addition to incremental costs and potential disruptions to our energy supply and broader supply chain, subsidies from the federal government to the renewable energy industry and other climate-related costs incurred by the federal government may increase the national deficit and debt, which would increase the reimbursement risks we face. See “Reimbursement Risks” above.
There are numerous organizations that provide information to investors on corporate governance and related matters, which have developed rating methodologies for evaluating companies on environmental matters, such as greenhouse gas emissions. Such ratings are used by some investors to inform their investment and voting decisions. Those organizations, however, may base their ratings on assumptions regarding our business that are not accurate or otherwise lack an understanding of the inpatient rehabilitation business, such as conflating our hospitals with typically much larger and energy intensive acute-care hospitals, and their ratings may result in decreased demand for our stock or advocacy campaigns that divert management attention from our core business or, if successful, impose additional costs and burdens on us.
The transition to lower greenhouse gas emissions technology; the effects of energy pricing and reliability and changes in public sentiment, regulations, governmental subsidies and deficits, taxes, public mandates or requirements; the increase in climate-related lawsuits and insurance premiums; and the implementation of more robust disaster recovery and business continuity plans are likely to increase the costs to maintain our operations and to divert management attention from our core business, either of which may have an adverse effect on our business, financial position and results of operations.
Financial Risks
We may incur additional indebtedness in the future, and that debt or the associated increased leverage may have negative consequences for our business. The restrictive covenants included in the terms of our indebtedness could affect our ability to execute aspects of our business plan successfully.
As of December 31, 2025, we have approximately $2.2 billion of long-term debt outstanding (including that portion of long-term debt classified as current and excluding $294.6 million in finance leases). See Note 8, Long-term Debt, to the accompanying consolidated financial statements. Subject to specified limitations, our credit agreement and the indentures governing our debt securities permit us and our subsidiaries to incur material additional debt. If new debt is added to our current debt levels, the risks described here could intensify.
Our indebtedness could have important consequences, including:
•limiting our ability to borrow additional amounts to fund working capital, capital expenditures, acquisitions, debt service requirements, execution of our business strategy and other general corporate purposes;
•making us more vulnerable to adverse changes in general economic, industry and competitive conditions, in government regulation and in our business by limiting our flexibility in planning for, and making it more difficult for us to react quickly to, changing conditions;
•placing us at a competitive disadvantage compared with competing providers that have less debt; and
•exposing us to risks inherent in interest rate fluctuations for outstanding amounts under our credit facility, which could result in higher interest expense in the event of increases in interest rates, as discussed in Item 7A, Quantitative and Qualitative Disclosures about Market Risk.
We are subject to contingent liabilities, prevailing economic conditions, and financial, business, and other factors beyond our control. Although we expect to make scheduled interest payments and principal reductions, we cannot provide assurance that changes in our business or other factors will not occur that may have the effect of preventing us from satisfying obligations under our credit agreement or debt instruments. If we are unable to generate sufficient cash flow from operations in the future to service our debt and meet our other needs or have an unanticipated cash payment obligation, we may have to refinance all or a portion of our debt, obtain additional financing or reduce expenditures or sell assets we deem necessary to our business. We cannot provide assurance these measures would be possible or any additional financing could be obtained.
In addition, the terms of our credit agreement and the indentures governing our senior notes do, and our future debt instruments may, impose restrictions on us and our subsidiaries, including restrictions on our ability to, among other things, engage in acquisition and combination transactions, pay dividends on or repurchase our capital stock, engage in transactions with affiliates, or incur or guarantee indebtedness. These covenants could also adversely affect our ability to finance our future operations or capital needs and pursue available business opportunities. For additional discussion of our material debt covenants, see the “Liquidity and Capital Resources” section of Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, and Note 8, Long-term Debt, to the accompanying consolidated financial statements.
In addition, our credit agreement requires us to maintain specified financial ratios and satisfy certain financial condition tests. See the “Liquidity and Capital Resources” section of Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, and Note 8, Long-term Debt, to the accompanying consolidated financial statements. Although we remained in compliance with the financial ratios and financial condition tests as of December 31,
2025, we cannot provide assurance we will continue to do so. Events beyond our control, including changes in general economic and business conditions, may affect our ability to meet those financial ratios and financial condition tests. A severe downturn in earnings or, if we have outstanding borrowings under our credit facility at the time, a rapid increase in interest rates could impair our ability to comply with those financial ratios and financial condition tests and we may need to obtain waivers from the required proportion of the lenders to avoid being in default. If we try to obtain a waiver or other relief from the required lenders, we may not be able to obtain it or such relief might have a material cost to us or be on terms less favorable than those in our existing debt. If a default occurs, the lenders could exercise their rights, including declaring all the funds borrowed (together with accrued and unpaid interest) to be immediately due and payable, terminating their commitments or instituting foreclosure proceedings against our assets, which, in turn, could cause the default and acceleration of the maturity of our other indebtedness. A breach of any other restrictive covenants contained in our credit agreement or the indentures governing our senior notes would also (after giving effect to applicable grace periods, if any) result in an event of default with the same outcome.
As of December 31, 2025, approximately 68% of our consolidated Property and equipment, net was held by our Company and its guarantor subsidiaries under its credit agreement. See Note 8, Long-term Debt, to the accompanying consolidated financial statements, the “Liquidity and Capital Resources” section of Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations, and Item 2, Properties.
Uncertainty in the credit markets could adversely affect our financial condition or our growth opportunities.
High yield, investment grade, and sovereign credit markets may be affected by geopolitical turmoil, inflationary pressures, and changing central bank policies. These conditions could result in unsettled credit markets for extended periods of time. Future market shocks, such as international trade wars and the inability of Congress to approve a budget or authorize an increase the debt ceiling in the United States, could result in reductions in the availability of certain types of debt financing, including access to revolving lines of credit. Future business needs combined with market conditions at the time may cause us to seek alternative sources of potentially less attractive financing and may require us to adjust our business plan accordingly. Tight credit markets, such as might result from turmoil in the sovereign debt markets, would likely make additional financing more expensive and difficult to obtain. Actions by the United States Federal Reserve system, such as increasing the discount rate, may also increase the interest expense associated with our current or future borrowings. The inability to obtain additional financing at a reasonable cost could have a material adverse effect on our financial condition or our growth opportunities.
As a result of credit market uncertainty, we also face potential exposure to counterparties who may be unable to adequately service our needs, including the ability of the lenders under our credit agreement to provide liquidity when needed. We monitor the financial strength of our depositories, creditors, and insurance carriers using publicly available information, as well as qualitative inputs.