HCA Hca Healthcare, Inc. - 10-K

Item 1A. Risk Factors

If any of the events discussed in the following risk factors were to occur, our business, financial position, results of operations, cash flows or prospects could be materially, adversely affected. Additional risks and uncertainties not presently known to us or that we currently deem immaterial may also affect us. Our business is subject to the following material risks and uncertainties.

Risks related to our indebtedness:

We have significant indebtedness and may incur further indebtedness in the future. Our indebtedness could adversely affect our ability to raise additional capital to fund our operations, limit our ability to react to changes in the economy or our industry, expose us to interest rate risk to the extent of our variable rate debt and prevent us from meeting our obligations.

As of December 31, 2025, our total indebtedness was $46.492 billion. As of December 31, 2025, we had availability of $5.779 billion under our senior unsecured credit facility (after giving effect to all issued and outstanding letters of credit and our intention to maintain a minimum available borrowing capacity equal to the aggregate amount outstanding under the commercial paper program ($2.207 billion as of December 31, 2025)). Our indebtedness could have important consequences, including:

increasing our vulnerability to downturns or adverse changes in general economic, industry or competitive conditions and adverse changes in government regulations;

requiring a portion of cash flows from operations to be dedicated to the payment of principal and interest on our indebtedness, therefore reducing our ability to use our cash flows to fund our operations, capital expenditures and future business opportunities;

exposing us to the risk of increased interest rates on our existing borrowings that are at variable rates of interest or refinancing our debt in a rising or high rate environment;

limiting our ability to make strategic acquisitions or causing us to make nonstrategic divestitures;

limiting our ability to obtain additional financing for working capital, capital expenditures, share repurchases, dividends, product or service line development, debt service requirements, acquisitions and general corporate or other purposes; and

limiting our ability to adjust to changing market conditions and placing us at a competitive disadvantage compared to our competitors who have less debt.

We and our subsidiaries have the ability to incur additional indebtedness in the future, subject to the restrictions contained in our senior unsecured credit facility and the indentures governing our outstanding notes. If new indebtedness is added to our current debt levels, interest rates and the related risks that we now face could intensify.

We may not be able to generate sufficient cash to service all of our indebtedness and may not be able to refinance our indebtedness on favorable terms. If we are unable to do so, we may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful.

Our ability to make scheduled payments on or to refinance our debt obligations depends on our financial condition and operating performance, which are subject to prevailing economic and competitive conditions and to certain financial, business and other factors beyond our control. We cannot guarantee we will maintain a level of cash flows from operating activities sufficient to permit us to pay the principal, premium, if any, and interest on our indebtedness.

In addition, we conduct our operations through our subsidiaries. Accordingly, repayment of our indebtedness is dependent on the generation of cash flows by our subsidiaries and their ability to make such cash available to us by dividend, debt repayment or otherwise. Our subsidiaries may not be able to, or may not be permitted to, make distributions to enable us to make payments in respect of our indebtedness. Each subsidiary is a distinct legal entity, and, under certain circumstances, legal and contractual restrictions may limit our ability to obtain cash from our subsidiaries.

We may find it necessary or prudent to refinance our outstanding indebtedness, the terms of which refinancing may not be favorable to us. Our ability to refinance our indebtedness on favorable terms, or at all, is directly affected by the then current global economic and financial conditions which affect the availability of debt financing and the rates at which such financing is available. In addition, our ability to incur secured indebtedness depends in part on the value of our assets, which depends, in turn, on the strength of our cash flows and results of operations, and on economic and market conditions and other factors. Downgrades in our credit ratings may also negatively affect availability of debt financing and the rates at which such financing is available.

If our cash flows and capital resources are insufficient to fund our debt service obligations or we are unable to refinance our indebtedness, we may be forced to reduce or delay investments and capital expenditures, or to sell assets, seek additional capital or restructure our indebtedness. These alternative measures may not be successful and may not permit us to meet our scheduled debt service obligations. If our operating results and available cash are insufficient to meet our debt service obligations, we could face substantial liquidity problems and might be required to dispose of material assets or operations to meet our debt service and other obligations. We may not be able to consummate those dispositions, or the proceeds from the dispositions may not be adequate to meet any debt service obligations then due.

Our debt agreements contain restrictions that limit our flexibility in operating our business.

Our senior unsecured credit facility and the indentures governing our outstanding notes contain various covenants that limit our ability to engage in specified types of transactions. These covenants limit our and/or certain of our subsidiaries’ ability to, among other things:

incur additional indebtedness or issue certain preferred shares;

create liens;

engage in certain sale and lease-back transactions; and

consolidate, merge, sell or otherwise dispose of all or substantially all of our assets.

Under our senior unsecured credit facility, we are required to satisfy and maintain a specified financial ratio. Our ability to maintain this financial ratio may be affected by global economic and financial conditions or other events beyond our control, and there can be no assurance we will continue to maintain this ratio. A breach of this or any other covenant could result in a default under our senior unsecured credit facility, upon which the lenders thereunder could elect to declare all amounts outstanding to be immediately due and payable and terminate all commitments to extend further credit, which would also result in an event of default under a significant portion of our other outstanding

indebtedness. In a scenario where the repayment of borrowings is accelerated, there can be no assurance there will be sufficient assets to repay our senior unsecured credit facility and our other indebtedness.

Risks related to human capital:

Our results of operations may be adversely affected by competition for staffing, the shortage of experienced nurses and other health care professionals and labor union activity.

Our operations are dependent on the efforts, abilities and experience of our management and medical personnel, such as physicians, nurses, pharmacists and lab technicians. We compete with other health care providers in recruiting and retaining qualified management and personnel responsible for the daily operations of each of our hospitals and other facilities, including nurses and other nonphysician health care professionals. We depend on the available labor pool of employees in each of the markets in which we operate to fill other necessary positions. In some markets, the availability of nonphysician health care professionals and medical support personnel has been a significant operating issue to health care providers, including at certain of our facilities. The impact of labor shortages across the health care industry may result in other health care facilities, such as nursing homes, limiting admissions, which may constrain our ability to discharge patients to such facilities, increase labor costs and further exacerbate the demand on our resources, supplies and staffing.

Economic conditions, including macroeconomic uncertainties and inflationary pressure, workforce burnout, and public health conditions and other factors, have exacerbated workforce competition, personnel shortages and capacity constraints. New limitations on federal loan eligibility, other student loan changes imposed pursuant to the FBA and changes to immigration policies may also impact health care personnel shortages. We may be required to increase wages and benefits to recruit and retain nurses and other medical support personnel and to hire more expensive temporary or contract personnel.

If there is additional union organizing activity or a significant portion of our employee base unionizes, it is possible our labor costs could increase. When negotiating collective bargaining agreements with unions, whether such agreements are renewals or first contracts, we have experienced, and could experience in the future, labor strikes. Our continued operation during any strikes could result in an increase to our labor costs. In addition, upon the expiration of existing collective bargaining agreements, we may not reach new agreements without union action, and any such new agreements may not be on terms satisfactory to us. The unavailability of staff, or the inability of the Company to control labor costs, could have a material, adverse effect on our capacity, growth prospects and results of operations.

In addition, federal and state laws and regulations may increase our costs of maintaining qualified nurses and other medical support personnel. We operate in states that have adopted mandatory nurse-staffing ratios or mandate staffing committees to develop staffing plans. If these states reduce, or if additional states in which we operate adopt or the federal government adopts, mandatory nurse-staffing ratios or related measures, our compliance with such measures could significantly affect labor costs and have an adverse impact on revenues or our results of operations if we are required to limit admissions, hire additional personnel or otherwise incur additional costs. If our labor costs continue to increase, we may not be able to offset these increased costs, as a significant percentage of our revenues are based on reimbursement rates that are fixed or negotiated no less frequently than annually.

Our performance depends on our ability to recruit and retain quality physicians.

The success of our hospitals depends in part on the number and quality of the physicians on the medical staffs of our hospitals, the admission and utilization practices of those physicians, maintaining good relations with those physicians and controlling costs related to their employment or affiliation with our hospitals. Although we employ some physicians, physicians are often not employees of the hospitals at which they practice and instead affiliate with us and use our facilities as an extension of their practices. In many of the markets we serve, physicians may have admitting privileges at other hospitals in addition to our hospitals. We continue to face increasing competition to recruit and retain quality physicians, as well as increasing costs to contract with hospital-based physicians. Such physicians may terminate their affiliation with our hospitals at any time. Some states have enacted restrictions on the provision of certain procedures or types of care, which may impact providers ’ recruitment and retention efforts in those states. We anticipate facing increased challenges with recruitment and retention as a significant portion of the current physician population reaches retirement age, especially if there is a shortage of physicians willing and able to provide comparable services. Moreover, changes in immigration policies could reduce the availability of international physicians. If we are unable to recruit and retain quality physicians to affiliate with our hospitals, enter into contractual arrangements with hospital-based physicians, or provide adequate support personnel or technologically advanced equipment and hospital facilities that meet the needs of those physicians and their patients, our admissions may decrease, our operating performance may decline, and our capacity and growth prospects may be materially adversely affected.

We may be unable to attract, hire and retain a highly qualified workforce, including key management.

The talents and efforts of our employees, particularly our key management, are vital to our success. The members of our management team have significant industry experience, and if any member of our management team leaves the Company unexpectedly, such member would be difficult to replace. While we have adopted succession plans to prepare for such an event, our succession plans may not result in a successful transition. Further, institutional knowledge may be lost in any potential managerial transition. We may be unable to retain key management or attract other highly qualified employees, particularly if we do not offer employment terms that are competitive with the rest of the labor market. Failure to attract, hire, develop, motivate, and retain highly qualified employee talent or failure to develop and implement an adequate succession plan for the management team could disrupt our operations and adversely affect our business and our future success.

Risks related to technology, data privacy and cybersecurity:

Cybersecurity incidents or other forms of data breaches could result in the compromise of our facilities, confidential data or critical data systems, causing our operations to be impaired or impacted. A cybersecurity incident or other form of data breach could also give rise to potential harm to patients; remediation and other expenses; and exposure to liability under privacy and security laws, consumer protection laws, common law theories or other laws. Such incidents could subject us to litigation and foreign, federal and state governmental inquiries, damage our reputation, and otherwise be disruptive to our business.

We, directly and through our vendors and other third parties, collect and store on networks, devices and technology platforms sensitive information, including intellectual property, proprietary business information, protected health information of our patients and personally identifiable information of our employees, patients and consumers. Our facilities use EHR and other information systems and medical devices that store or transmit information that are integral to the provision of patient care, and these systems and devices are increasingly connected to the internet, hospital networks and other medical devices. The secure maintenance of this information and technology is critical to our business operations.

We have implemented multiple layers of security measures, including cybersecurity and information security systems, protocols and monitoring procedures, intended to protect the confidentiality, integrity and availability of our data and the systems and devices that store and transmit such data. In addition, we rely on various third parties to have appropriate controls to protect our information that is on their systems or otherwise in their control, and we seek to obtain assurances that such third parties will protect our information. However, despite our efforts to mitigate our exposure to cyberattack, even an advanced internal control environment is vulnerable to compromise. We have seen, and believe we will continue to see, widespread vulnerabilities that could affect our or other third parties’ data or systems. We rely on a substantial number of employees, contractors, personnel, hardware, software, applications, and third-party vendors, platforms and technologies, each of which may represent an attack surface for threat actors. Threats from malicious actors, including nation-state actors and ransomware groups, new vulnerabilities and advanced new attacks against our, or our vendors’, information systems and devices create risk of cybersecurity incidents, including ransomware, malware and phishing incidents, in which third parties attempt to fraudulently induce our employees or our vendors’ employees into disclosing usernames, passwords or other sensitive information, which can in turn be used for unauthorized access to our or our vendors’ systems. We, our vendors and other third parties have experienced cybersecurity incidents in the past and continue to be the target of attempted cybersecurity and other threats that could have a significant impact on our business, including threats by third parties seeking to access, misappropriate, corrupt, or manipulate our information or disrupt our operations. We expect that we, our vendors and other third parties will continue to experience an increase in cybersecurity threats in the future, both directly and indirectly through threats targeting third parties, as the volume and intensity of cyberattacks on hospitals, health systems and other health care entities continue to increase. Furthermore, because the tools and techniques used by attackers change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We, our vendors and other third parties may experience security incidents that may remain undetected for an extended period. Even if identified, we, our vendors and other third parties may be unable to adequately investigate or remediate incidents or breaches, including due to attackers increasingly using tools and techniques that are designed to circumvent controls, avoid detection and remove or obfuscate forensic evidence. State-sponsored threat actors are increasingly targeting critical infrastructure sectors, including health systems and other critical infrastructure on which we rely. Increasing use of AI technologies in our internal systems may create new attack surfaces or methods for threat actors, and threat actors may use AI technologies to make cyberattacks more difficult to detect, contain or mitigate. Internal access management failures could also result in the compromise or unauthorized exposure of confidential data. Moreover, hardware, software or applications we use may have inherent vulnerabilities or defects of design, manufacture, or operations or could be inadvertently or

intentionally implemented or used in a manner that could compromise cybersecurity or information security. There can be no assurance that we or our vendors and other third parties will not be subject to additional cybersecurity threats and incidents that bypass our or their security measures, impact the integrity, availability or privacy of personal health information or other data subject to privacy laws or disrupt our or their information systems, devices or business, including our ability to provide various health care services. In such an event, we may incur substantial costs, including but not limited to, costs associated with remediating the effects of the cybersecurity or information security incident, costs for security measures to guard against similar future incidents and costs to recover data. Further, consumer confidence in the integrity and security of personal information and critical operations data in the health care industry generally could be shaken to the extent there are successful cyberattacks at other health care services companies, which could have a material, adverse effect on our business, financial position or results of operations.

Cybersecurity, privacy, physical security, operational resiliency and the continued development and enhancement of our controls, processes and practices designed to protect our facilities, information systems and data from attack, damage or unauthorized access remain a priority for us. However, as cyber threats continue to evolve, along with their increased volume and sophistication, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any cybersecurity vulnerabilities or incidents, and such measures may decrease the efficiency of our operations. We may also be required to expend additional resources to comply with evolving federal, state and industry requirements related to cybersecurity and information security, including those focused on health care providers. Although, to date, no cyberattack or other information or security breach has resulted in material losses or other material consequences to us, there can be no assurance that our controls and procedures in place to monitor and mitigate the risks of cyber threats, including the remediation of critical cybersecurity, information security and software vulnerabilities, will be sufficient and/or timely and that we will not suffer material losses or consequences in the future. Additionally, while we have in place insurance coverage designed to address certain aspects of cyber risks, such insurance coverage may be insufficient to cover our losses in excess of what we self-insure, or all types of claims that may arise. The occurrence of any of these events could result in (i) harm to patients; (ii) business interruptions and delays; (iii) the loss, misappropriation, corruption or unauthorized access of data; (iv) litigation and potential liability under privacy, security, breach notification and consumer protection laws, common law theories or other applicable laws; (v) reputational damage; and (vi) foreign, federal and state governmental inquiries, any of which could have a material, adverse effect on our financial position and results of operations and harm our business reputation.

Our operations could be impaired by a failure in or breach of our information systems or those of third parties on whose systems our business relies.

The performance of our information systems is critical to our business operations. In addition to our shared services initiatives, our information systems are essential to a number of critical areas of our operations, including:

accounting and financial reporting;

billing and collecting accounts;

coding and compliance;

admissions, provision of care and care coordination;

clinical systems and medical devices;

medical records and document storage;

inventory management;

negotiating, pricing and administering managed care contracts and supply contracts; and

monitoring quality of care and collecting data on quality measures necessary for full Medicare payment updates.

Information systems may be vulnerable to damage from a variety of sources, including telecommunications or network failures, human acts such as inadvertent or intentional misuse by employees, natural disasters and cyberattacks, including ransomware and data theft. Moreover, we rely on various third-party technology platforms, which are increasingly important to our business and continue to grow in complexity and scope. Failure to adequately and timely manage implementations of new technology, updates or enhancements of such platforms or interfaces between platforms could place us at a competitive disadvantage, disrupt our operations, and have a material, adverse impact on our business and results of operations.

We have taken precautionary measures designed to prevent problems that could affect our information systems. Nevertheless, there can be no assurance that our business continuity, technology change and information security response plans will effectively mitigate our operational risks. We or our vendors and other third parties upon whom

we rely may experience system failures and disruptions. The occurrence of any system failure could result in business interruptions or delays, the loss or corruption of data and cessations or interruptions in the availability of systems, any of which could have a material, adverse effect on our financial position and results of operations and harm our business reputation.

Health care technology initiatives, particularly those related to sharing patient data and interoperability and AI, involve risks that may adversely affect our operations.

The federal government is promoting the adoption of health information technology and the nationwide health information exchange to improve health care. For example, HHS incentivizes the adoption and meaningful use of certified EHR technology through its Medicare Promoting Interoperability Program and Quality Payment Program. Eligible hospitals that fail to demonstrate meaningful use of certified EHR technology and have not applied and qualified for a hardship exception are subject to reduced reimbursement from Medicare. Eligible health care professionals are also subject to positive or negative payment adjustments based, in part, on their use of EHR technology. Therefore, if our hospitals and employed professionals are unable to properly adopt, maintain and utilize certified EHR systems, any resulting payment adjustments may have an adverse effect on our financial condition and results of operations.

As EHR technologies have become widespread, the federal government has increased its focus on promoting patient access to health care data and interoperability. The 21st Century Cures Act and its implementing regulations prohibit information blocking by health care providers and certain other entities. Information blocking is defined as engaging in activities likely to interfere with the access, exchange or use of electronic health information, except as required by law or specified by HHS as a reasonable and necessary activity. Under a rule finalized by HHS in July 2024, a hospital found to have engaged in information blocking will not qualify as a “meaningful electronic health record user” under the Medicare Promoting Interoperability Program and as a result will lose 75% of the annual market basket increase it would otherwise receive, and MIPS-eligible clinicians, ACOs and ACO participants face similar disincentives.

Current and future initiatives related to health care technology, data sharing and interoperability may require changes to our operations, impose new and complex compliance obligations and require investments in infrastructure. In particular, AI is driving innovation and, in some cases, augmenting risks related to health care technology. For example, our physicians are adopting the use of generative AI to assist with the taking of patient medical notes, among other tasks. We may also use AI in health care-related administrative tasks, including in the collection of patient accounts receivable. Rapid changes in technology driven by AI may require us to expend significant resources to acquire, develop, implement and maintain that technology. Failure to integrate these technologies in a timely, cost-efficient and resource-efficient manner may impede our ability to deliver health care services in a competitive manner. There is also a risk that our confidential information becomes part of a model that is accessible by other third-party AI applications or users as a result of a cybersecurity incident or a third-party AI developer’s violation of our vendor engagement terms.

The development of AI technologies is complex, and there are technical challenges associated with achieving the desired level of accuracy, efficiency and reliability. For instance, AI models used by us or third-party vendors may be based on biased, inaccurate or deficient datasets, which could result in inaccurate or misleading outputs. Ineffective or inadequate AI development or deployment practices by us or third-party developers or vendors, including any disruptions, errors or failures of AI systems once implemented, could result in unintended consequences. Should the use of AI technologies fail to operate as anticipated or not perform as specified, including any biases or errors in the outputs of AI, patient care may be affected, legal claims may be asserted against us and our reputation may be harmed. Further, federal and state requirements regarding the use of AI by health care providers continue to evolve and could conflict as administrations take differing approaches to evolving AI. For example, HHS imposes transparency requirements for AI and other predictive algorithms that are part of certified health information technology. Some states have adopted or are considering additional measures regarding the use of AI within the health care industry. For example, California’s AB 3030 requires that certain disclaimers and instructions be provided to patients if generative AI is used to create patient communications pertaining to patient clinical information. In addition, Utah’s AIPA requires that physicians, nurses and other regulated health care providers disclose when an individual is interacting with generative AI in a “high-risk” manner, including the collection of health data or the provision of medical advice or services. Further, in Colorado, the CAIA will impose significant requirements on companies that use AI systems to recommend certain health decisions. If we or our third-party providers are restricted from using AI as a result of any laws or regulations, it could impact our operations and cause us to incur costs to replace or modify our use of AI. We may be subject to financial penalties or other disincentives or experience reputational damage for failure to comply with applicable laws and regulations. In addition, any failure or perceived failure by us or our third-party providers to

comply with applicable AI laws and regulations could result in investigations or legal proceedings, which could result in significant legal costs and potential liability.

Failure to effectively manage change associated with our technology, resiliency and other initiatives, including with respect to the implementation of a new EHR platform, may adversely affect our business, services and results of operations.

We utilize multiple integrated software and hardware operating systems across our operations, including in our hospitals. Although we continually monitor these systems and strive to design our policies, programs and processes to preserve or manage these systems, such processes may not be effective and are subject to weaknesses and failures, including human error, data limitations, process delays, system outages, cybersecurity incidents or failed controls. Failure to effectively preserve or manage data accurately, timely and completely may adversely affect its quality and reliability and impair our ability to manage business needs, the provision of care, strategic decision-making and operations. We employ change management methodologies to plan, test and execute system upgrades and improvements. However, we cannot guarantee that our systems will operate as designed or that the implementation of new systems or upgrades will not be subject to excessive costs or disruptions to our operations or business.

We are implementing a new EHR platform across our facilities, which is complex and time-intensive. Significant internal and external resources have been, and will continue to be, required for successful implementation, including resources to train colleagues. Complexity or delay in implementation may require substantial additional time and expense and divert management’s attention from other strategic priorities, which, in turn, could adversely affect our business, results of operations or financial condition. While we have taken steps intended to mitigate implementation risks, including staged deployments in certain facilities, there is no guarantee these mitigation efforts will be effective.

Further, we are executing financial resiliency initiatives designed to generate efficiencies and cost reductions that we expect will offset in part the adverse effects on our business from recent health care policy reforms, including the expiration of the enhanced premium tax credits and changes resulting from the FBA. Our ability to realize the benefits from these financial resiliency initiatives is subject to known and unknown risks and uncertainties, and failure to realize the expected benefits may have an adverse effect on our business and results of operations.

Risks related to public health crises:

The emergence and effects related to a potential future pandemic, epidemic or outbreak of an infectious disease could adversely affect our business and operations.

As a front-line provider of health care services, we are subject to the health and economic effects of public health conditions. If a pandemic, epidemic, outbreak of an infectious disease or other public health crisis were to occur in an area in which we operate, our operations could be adversely affected. Such a crisis could diminish the public trust in health care facilities, especially hospitals that fail to accurately or timely diagnose, or are treating (or have treated) patients affected by infectious diseases. If any of our facilities are involved, or perceived as being involved, in treating patients from such an infectious disease, other patients might cancel elective procedures or fail to seek needed care at our facilities, and our reputation may be negatively affected. Patient volumes may decline or volumes of uninsured and underinsured patients may increase, depending on the economic circumstances surrounding the pandemic, epidemic or outbreak. Further, a pandemic, epidemic or outbreak might adversely affect our operations by causing a temporary shutdown or diversion of patients, causing disruption or delays in supply chains for materials and products or causing staffing shortages in our facilities. Although we have contingency plans in place, including infection control and disaster plans, the potential impact of, as well as the public’s and the government’s response to, a future pandemic, epidemic or outbreak is difficult to predict and could adversely affect our business, results of operations, financial condition and cash flows.

Risks related to governmental regulation and other legal matters:

Our business, financial condition and results of operations may be adversely affected by changes and uncertainty in the health care industry, including health care public policy developments and other changes to laws and regulations. We are unable to predict whether, what, and when changes in the health care industry may occur, and the effects and ultimate impact of any changes are uncertain and may adversely affect our business and results of operations.

The health care industry is heavily regulated. Federal agencies oversee, regulate and otherwise affect many aspects of our business, including through Medicare and Medicaid policies, policies affecting the size of the uninsured population, and enforcement and interpretation of fraud and abuse laws. Several executive orders have been issued

that impact or may impact the health care industry, including measures aimed at restructuring government agencies and eliminating government expenditures and resulting in holds on or cancellations of congressionally authorized spending. In March 2025, HHS announced a significant agency restructuring intended to reduce the HHS workforce and consolidate divisions of the agency. Changes in agency structures and staffing, such as reduction or elimination of personnel and agencies, may result in changes to established rulemaking conventions and timelines, including for regularly issued reimbursement rules, among other effects. HHS also announced a change in its policy on public participation in rulemaking that may negatively affect the ability of industry participants to receive advance notice of and offer feedback on some policy changes. Regulatory uncertainty has also increased as a result of recent decisions issued by the U.S. Supreme Court that affect review of federal agency actions, including Loper Bright Enterprises v. Raimondo . These Supreme Court decisions increase judicial scrutiny of agency authority, shift greater responsibility for statutory interpretation to courts, expand the time period during which a plaintiff can sue regulators, and may result in inconsistent judicial interpretations and delays in agency rulemaking processes. These decisions may also increase legal challenges to health care regulations and agency guidance and decisions, including, but not limited to, those issued by HHS and its agencies, including CMS, the FDA and the OIG. Impacts of the recent Supreme Court decisions could require us to make changes to our operations and have a material negative impact on our business.

The health care industry has been and continues to be impacted by health care reform efforts and is subject to changing political, regulatory and other influences. For example, the Affordable Care Act expanded health insurance coverage through a combination of public program expansion and private sector health insurance reforms. Changes in the law’s implementation, subsequent legislation and regulations, state initiatives and other factors have affected and may continue to affect the number of individuals that elect to obtain public or private health insurance or the scope of such coverage, if obtained, and may impact our payer mix. For example, COVID-19 relief legislation temporarily enhanced the premium tax credits available for purchasing coverage through the Exchanges by lowering premiums and raising income eligibility thresholds, but these enhanced premium tax credits expired at the end of 2025. We believe the expiration of the enhanced premium tax credits will adversely impact Exchange enrollment and significantly increase the uninsured rate. In addition, the FBA includes several health care policy changes that are expected to impact insurance coverage obtained through the Exchanges, and a final rule issued by CMS in June 2025 makes other changes intended to address affordability, consumer protections and integrity of the Exchanges. The June 2025 rule is the subject of legal challenges and, in August 2025, a federal district court issued a nationwide stay of several provisions. Other legislative and executive branch initiatives related to health insurance, such as permitting the sale of insurance plans that lack currently required consumer protections, could increase rates of uninsured and underinsured individuals and destabilize insurance markets. Reductions in the number of insured individuals or the scope of insurance coverage, a decline in patients with private insurance coverage, or an increase in patients covered under governmental health programs or other health plans with lower reimbursement levels may have an adverse effect on our business and results of operations.

In addition, the Medicare and Medicaid programs are subject to change as a result of legislation and administrative actions. For example, some members of Congress have proposed changes intended to accelerate the shift from traditional Medicare to Medicare Advantage. Legislation and administrative actions at the federal level may also impact funding for, or the structure of, the Medicaid program and may shape administration of the Medicaid program at the state level. For example, the FBA includes significant health care policy reforms that are expected to result in Medicaid spending reductions and changes in administration of state Medicaid programs. Among other changes, the law limits eligibility for Medicaid by imposing work or community engagement requirements for adults under age 65 in Medicaid expansion states, including states with waiver-based expansions, subject to limited exceptions. The law also makes significant changes to Medicaid financing mechanisms, including restrictions intended to reduce the federal matching funds received by state Medicaid programs, with greater restrictions in states that have expanded Medicaid. It is difficult to predict the ultimate effects of the FBA, as it is a complex law that mandates various changes over time and we expect additional rulemaking and guidance from federal agencies regarding implementation. However, reductions in federal matching funds and increased state obligations and administrative burden could result in state limitations on Medicaid eligibility or coverage, among other effects, particularly if states are unable to offset reductions in federal funding. Some states have trigger laws that would end their Medicaid expansion or require other changes if the federal funding match rate is reduced or similar funding restrictions are imposed for Medicaid expansion. Although most of these trigger laws are not directly implicated by the FBA, some states may nonetheless consider or make changes to Medicaid expansion programs due to related budgetary pressures. In addition to implementing changes mandated through legislation, CMS may make changes to Medicaid payment models and may impose new restrictions or grant states additional flexibility in the administration of state Medicaid programs. Other health reform initiatives and proposals at the federal and state levels include those focused on price transparency and out-of-network charges, which may impact prices, our relationships with patients, payers or ancillary providers (such as anesthesiologists, radiologists and pathologists) and our competitive position, and site-neutral payment policies, which may reduce the reimbursement we receive. Some states are considering or have imposed

rate-setting measures, including limits on hospital rates. Other industry participants, such as private payers and large employer groups and their affiliates, may also introduce financial or delivery system reforms.

There is uncertainty regarding whether, when, and what other public policy initiatives will be adopted by federal and state governments and/or the private sector, the timing and implementation of any such efforts and the impact of those efforts on providers and other health care industry participants. These may include changes to trade policy and new or increased tariffs, which may impact our supply chain operations. It is difficult to predict the nature and/or success of current and future public policy changes, any of which may have an adverse effect on our business, results of operations, cash flow, capital resources and liquidity.

Changes in government health care programs may adversely affect our revenues and business.

A significant portion of our patient volume is derived from government health care programs, principally Medicare and Medicaid. Specifically, we derived 45.4% of our revenues from the Medicare and Medicaid programs in 2025. However, federal and state governments have made, and continue to make, significant modifications to the Medicare and Medicaid programs through statutory and regulatory changes, administrative rulings and other interpretations and determinations. These changes may include, for example, reductions to reimbursement levels and to supplemental payment programs, funding restrictions, limitations on scope of coverage or patient eligibility, and changes affecting utilization review. These and other changes may impact the scale and scope of the Medicare and Medicaid programs, may reduce the reimbursement we receive, may affect the cost of providing services to patients and could otherwise adversely affect our business and results of operations. In addition, delays or issues implementing reimbursement-related rules, including periodic payment updates for government programs, and interruptions in the distribution of governmental funds could have an adverse impact on our business.

In recent years, legislative and regulatory changes have resulted in limitations on and, in some cases, reductions in levels of payments to health care providers for certain services under the Medicare program. For example, Congress established automatic spending reductions, referred to as sequestration, under the BCA, resulting in a 2% reduction in Medicare payments that extends through the first five months of federal fiscal year 2033. These reductions are in addition to reductions mandated by other laws. It is difficult to predict whether, when or what other deficit or other spending reduction initiatives may be proposed by Congress, but we anticipate that efforts to address the federal budget deficit will continue to place pressures on government health care programs and that future legislation may include additional Medicare spending reductions.

From time to time, CMS revises the reimbursement systems used to reimburse health care providers, including changes to the inpatient hospital MS-DRG system and other payment systems, which may result in reduced Medicare payments. For example, under a site neutrality policy, clinic visit services provided by off-campus provider-based departments are generally not covered as outpatient department services under the outpatient PPS, but instead are paid at the Physician Fee Schedule rate, which is generally substantially lower than the outpatient PPS rate. Further, to address past changes to the 340B Drug Pricing Program that were invalidated by the U.S. Supreme Court, CMS finalized payment reductions under the outpatient PPS. Payment rates were reduced for non-drug services in calendar year 2023, and additional reductions to payments for non-drug item and services took effect in calendar year 2026 and will continue for several years, until the past invalidated payments are offset. These payment policies and future changes to payment policies may adversely impact our results of operations, and any potential legal challenges to changes may take years to resolve. Payment policies for different types of providers and for various items and services continue to evolve. Congress and/or CMS may implement further changes to reimbursement for items or services that result in payment reductions for other items or services or that otherwise affect our business and operations. In some cases, private third-party payers rely on all or portions of Medicare payment systems to determine payment rates. Changes to government health care programs that reduce payments under these programs may negatively impact payments from private third-party payers.

Legislation and administrative actions at the federal and state levels may also impact the funding for, or structure or administration of, the Medicaid program, including through changes to Medicaid supplemental payments and SDP arrangements. For example, the FBA includes significant health care policy reforms that are expected to result in Medicaid spending reductions and changes in administration of state Medicaid programs. Among other changes, the law makes significant changes to Medicaid financing mechanisms, including restrictions intended to reduce the federal matching funds received by state Medicaid programs, such as limitations on provider tax arrangements and SDP arrangements. The FBA requires HHS to revise regulations governing SDP arrangements to cap total payment rates paid by Medicaid managed care organizations for specified services, tying caps to Medicare payment rates instead of average commercial rates, a change that we anticipate will impact payment rates in many states in which we operate, including Texas. It is difficult to anticipate the ultimate effects of the FBA, as it is a complex law that mandates various changes over time and, in many cases, the details of implementation are not yet clear. Further, CMS administrators may make other changes to Medicaid payment models and may impose new restrictions or grant states additional

flexibilities in the administration of state Medicaid programs. For example, structural and other changes to Medicaid supplemental payment programs and SDP arrangements, both of which are subject to CMS approval, could result in our revenues from such payments being reduced or eliminated. Among other measures, states may divert funding for SDP arrangements from other payment programs or direct payments to a specific subset of providers, and we may not satisfy applicable criteria.

In addition, several states in which we operate face budgetary challenges that have resulted, and likely will continue to result, in reduced Medicaid funding levels to hospitals and other providers. Because most states must operate with balanced budgets and the Medicaid program is often a state’s largest program, some states have enacted or may consider enacting legislation designed to reduce their Medicaid expenditures. Budgetary pressures, which may be heightened during periods of economic weakness, combined with increased spending demands, including as a result of recent federal actions, are creating additional uncertainty and may result in decreased spending, or decreased spending growth, for Medicaid programs in many states. Many states have also adopted, or are considering, legislation or administrative actions designed to reduce coverage, change patient eligibility requirements and/or enroll Medicaid recipients in managed care programs.

Current or future health care reform and deficit reduction efforts, changes or delays in laws or regulations regarding government health care programs, other changes in the administration of government health care programs and changes by private third-party payers in response to health care reform and other changes to government health care programs could have a material, adverse effect on our financial position and results of operations.

If we fail to comply with extensive laws and government regulations, we could suffer penalties or be required to make significant changes to our operations.

As a participant in the health care industry, we are required to comply with extensive and complex laws and regulations at the federal, state and local government levels relating to, among other things:

billing and coding for services and properly handling overpayments;

appropriateness and classification of level and setting of care provided, including proper classification of admissions, observation services and outpatient care;

relationships with physicians and other referral sources and referral recipients;

necessity, appropriateness and adequacy of medical care;

quality of medical equipment and services;

qualifications and supervision of medical and support personnel;

patient, workforce and public safety;

the confidentiality, maintenance, interoperability, exchange and security of health-related and personal information and medical records, including data breach, ransomware and identity theft issues;

the provision of services via telehealth, including technological standards and coverage restrictions or other limitations on reimbursement;

the development and use of AI and other predictive algorithms, including those used in clinical decision support tools;

screening, stabilization and transfer of individuals who have emergency medical conditions;

restrictions on the provision of medical care, including with respect to reproductive care;

facility and personnel licensure, certification and accreditation and enrollment standards and requirements for participation in government programs;

the manufacture, distribution, maintenance and dispensing of pharmaceuticals, controlled substances and medical devices;

debt collection, balance billing and billing for out of network services;

consumer disclosures and price transparency;

communications with patients and consumers;

preparing and filing of cost reports;

operating policies and procedures;

activities regarding competitors;

addition of facilities and services; and

environmental protection, including disposal of regulated materials.

Among these laws are the federal Anti-kickback Statute, EKRA, the federal Stark Law, the FCA, the No Surprises Act and similar state laws. We have a variety of financial relationships with physicians and others who either refer or influence the referral of patients to our hospitals, other health care facilities, laboratories and employed physicians or who are the recipients of referrals, and these laws govern those relationships. The OIG has enacted safe harbor regulations that outline practices deemed protected from prosecution under the Anti-kickback Statute. While we endeavor to comply with the applicable safe harbors, certain of our current arrangements, including joint ventures and financial relationships with physicians and other referral sources and persons and entities to which we refer patients, do not qualify for safe harbor protection. Failure to qualify for a safe harbor does not mean the arrangement necessarily violates the Anti-kickback Statute but may subject the arrangement to greater scrutiny. However, we cannot offer assurance that practices outside of a safe harbor will not be found to violate the Anti-kickback Statute. Allegations of violations of the Anti-kickback Statute may be brought under the federal Civil Monetary Penalty Law, which requires a lower burden of proof than other fraud and abuse laws, including the Anti-kickback Statute.

Our financial relationships with physicians who make referrals for designated health services and their immediate family members must comply with the Stark Law by meeting an exception. We attempt to structure our relationships to meet an exception to the Stark Law, but the regulations implementing the exceptions are detailed and complex. We do not always have the benefit of significant regulatory or judicial interpretations of the Stark Law and its implementing regulations. Thus, we cannot provide assurance that every relationship complies fully with the Stark Law. Unlike the Anti-kickback Statute, failure to meet an exception under the Stark Law results in a violation of the Stark Law, even if such violation is technical in nature.

Additionally, if we violate the Anti-kickback Statute or Stark Law, or if we improperly bill for our services, we may be found to violate the FCA, either under a suit brought by the government or by a private person under a qui tam , or “whistleblower,” suit. See Item 1, “Business — Regulation and Other Factors.”

A variety of state, national, foreign and international laws and regulations apply to the collection, use, retention, protection, security, disclosure, transfer and other processing of personal information. Various states in which we operate have passed privacy laws and regulations that impose restrictive requirements on the use, disclosure, transfer and storage of personal information, including restrictions on the offshoring of data, and many other state and federal privacy laws have been proposed. In many cases, these laws are more restrictive or impose more obligations than, and may not be preempted by, the HIPAA privacy and security regulations, may apply to employees and business contacts in addition to patients, and may be subject to new and varying interpretations by courts and government agencies. The potential effects of these laws are far-reaching and may require us to incur substantial expenses, including costs associated with modifying our data processing practices and policies.

As a result of our operations in the United Kingdom, we are subject to the UK Data Protection Act, which contains stricter privacy restrictions than laws and regulations in the United States and provides for significant fines in the event of violations. These administrative fines are based on a multi-factored approach. Moreover, rules for data transfers outside of the United Kingdom and European Economic Area are subject to increased regulation, and such regulations are frequently subject to further revision and updated regulator guidance, making necessary compliance measures challenging to ascertain and implement with respect to our United Kingdom operations. We expect that there will continue to be new or modified laws, regulations, regulatory guidance and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions, which could impact our operations and cause us to incur substantial costs.

We send short message service (“SMS”) text messages to patients. We must ensure that our SMS texting practices comply with regulations and agency guidance under the Telephone Consumer Protection Act (the “TCPA”), a federal statute that protects consumers from unwanted telephone calls, faxes and text messages as well as similar state laws and regulations. While we strive to adhere to strict policies and procedures that comply with the TCPA and similar state laws, the Federal Communications Commission, the agency that implements and enforces the TCPA, or other federal or state regulatory authorities or private litigants may disagree with our interpretation of such laws, and may claim that the notices and disclosures we provide, form of consents we obtain or our SMS texting practices are not adequate or violate applicable law, all which may subject us to penalties and other consequences for

noncompliance. Determination by a court or regulatory agency that our SMS texting practices violate the TCPA or similar state laws could subject us to civil penalties and could require us to change some portions of our business. Even an unsuccessful challenge by patients or regulatory authorities of our activities could result in adverse publicity and could require a costly response from and defense by us. Moreover, if wireless carriers or their trade associations, which issue guidelines for texting programs, determine that we have violated their guidelines, our ability to engage in texting programs may be curtailed or revoked, which could impact our operations and cause us to incur costs related to implementing alternative solutions.

We engage in consumer debt collection for HCA-affiliated hospitals and certain non-affiliated hospitals. We also engage in credit reporting for certain non-affiliated hospitals. The federal Fair Debt Collection Practices Act, the Fair Credit Reporting Act and the TCPA restrict the methods that companies may use to contact and seek payment from consumer debtors regarding past due accounts and to report to consumer reporting agencies on the status of those accounts. Many states impose additional limitations or requirements on debt collection and credit reporting practices, and some of those requirements are more stringent than the federal requirements.

We are also subject to various international, federal, state and local statutes and ordinances regulating the discharge of materials into the environment. For example, our health care operations generate medical waste, such as pharmaceuticals, biological materials and disposable medical instruments that must be handled, stored, transported, treated and disposed of in compliance with federal, state and local environmental laws and regulations. Environmental regulations also may apply when we build new facilities or renovate existing facilities. If we are found not to be in compliance with such laws and regulations, we may be liable for significant investigation and clean-up costs or be subject to enforcement actions by governmental authorities or lawsuits by private plaintiffs. Moreover, any changes in the environmental regulatory framework (including legislative or regulatory efforts designed to address changing global weather patterns) could have a material, adverse effect on our business.

We are also subject to various federal and state antitrust laws that, for example, restrict exclusive contracting relationships with health care providers, restrict sharing of cost and pricing data, prohibit competitors from taking collective action to set commercial payer reimbursement rates and establish integration requirements for joint ventures to contract with payers. We also operate health care facilities in the United Kingdom and have operations and commercial relationships with companies in other foreign jurisdictions and, as a result, are subject to certain U.S. and foreign laws applicable to businesses generally, including anti-corruption and anti-bribery laws. The Foreign Corrupt Practices Act regulates U.S. companies in their dealings with foreign officials, prohibiting bribes and similar practices, and requires that they maintain records that fairly and accurately reflect transactions and appropriate internal accounting controls. In addition, the United Kingdom Bribery Act has wide jurisdiction over certain activities occurring within the United Kingdom.

If we fail to comply with these or other applicable laws and regulations, which are subject to change, we could be subject to liabilities, including civil penalties, money damages, lapses in reimbursement, the loss of our licenses to operate one or more facilities, exclusion of one or more facilities from participation in the Medicare, Medicaid and other federal and state health care programs, civil lawsuits and criminal penalties. In addition, different interpretations or enforcement of, or amendments to, these and other laws and regulations in the future could subject our current or past practices to allegations of impropriety or illegality or could require us to make changes in our facilities, equipment, personnel, services, capital expenditure programs and operating expenses. The costs of compliance with, and the other burdens imposed by, these and other laws or regulatory actions may increase our operational costs, result in interruptions or delays in the availability of systems and/or result in a patient volume decline. We may also face audits or investigations by one or more domestic or foreign government agencies relating to our compliance with these regulations. An adverse outcome under any such investigation or audit, a determination that we have violated these or other laws or a public announcement that we are being investigated for possible violations could result in liability, could result in negative publicity and an adverse impact on our reputation and could adversely affect our business, financial condition, results of operations or prospects.

State efforts to regulate the construction or expansion of health care facilities could impair our ability to operate and expand our operations.

Some states, particularly in the eastern part of the country, require health care providers to provide notice or obtain prior approval under a CON program for the purchase, construction or expansion of health care facilities, to make certain capital expenditures or to make changes in services or bed capacity. In giving approval, these states consider the need for additional or expanded health care facilities or services. We currently operate health care facilities in a number of states with CON laws or that require other types of approvals for the establishment or expansion of certain facility types or services. The failure to obtain any required CON or other required approval or

provide a required notice could impair our ability to operate or expand operations. Any such failure could, in turn, adversely affect our ability to attract patients and physicians to our facilities and grow our revenues, which would have an adverse effect on our results of operations.

We may incur additional tax liabilities.

We are subject to tax in the United States as well as those states and foreign jurisdictions in which we do business. Changes in tax laws, including increases in tax rates, interpretations of tax laws by taxing authorities, other standard setting bodies or judicial decisions, could increase our tax obligations and have a material, adverse impact on our results of operations.

We are also subject to examination by federal, state and foreign taxing authorities. Management believes HCA Healthcare, Inc., its subsidiaries and affiliates properly reported taxable income and paid taxes in accordance with applicable laws and agreements established with the Internal Revenue Service (“IRS”), state and foreign taxing authorities and final resolution of any disputes will not have a material, adverse effect on our results of operations or financial position. However, if payments due upon final resolution of any issues exceed our recorded estimates, such resolutions could have a material, adverse effect on our results of operations or financial position.

We have been and could become the subject of government investigations, claims and litigation, as well as governmental and commercial payer audits.

Health care companies are subject to numerous investigations by various government agencies. Further, under the FCA, private parties have the right to bring qui tam , or “whistleblower,” suits against companies that submit false claims for payments to, or improperly retain overpayments from, the government. Some states have adopted similar state whistleblower and false claims provisions. Certain of our individual facilities and/or affiliates have received, and other facilities and/or affiliates may receive, government inquiries from, and may be subject to investigation by, federal and state agencies. Depending on whether the underlying conduct in these or future inquiries or investigations could be considered systemic, their resolution could have a material, adverse effect on our financial position, results of operations and liquidity.

Government agencies and their agents, such as the MACs, fiscal intermediaries and carriers, as well as the OIG, CMS and state Medicaid programs, conduct audits of our health care operations. CMS and state Medicaid agencies contract with RACs and other contractors to conduct reviews of claims, generally post-payment, and other program integrity activities to detect and correct improper payments in the Medicare program, including managed Medicare plans, and the Medicaid programs. RAC denials are appealable. However, the RAC audit and appeals processes can impose a significant administrative burden on providers, and we may experience delays in appealing RAC payment denials. Private third-party payers may conduct similar payment audits, and we also perform internal audits and monitoring. Depending on the nature of the conduct found in such audits and whether the underlying conduct could be considered systemic, the resolution of these audits could have a material, adverse effect on our financial position, results of operations and liquidity.

Should we be found out of compliance with applicable laws, regulations or programs, depending on the nature of the findings, our business, our financial position and our results of operations could be negatively impacted.

We may be subject to liabilities from claims brought against our facilities, which are costly to defend and may require us to pay significant damages if not covered by insurance.

We are subject to litigation relating to our business practices, including claims and legal actions by patients and others in the ordinary course of business alleging malpractice, product liability or other legal theories. Many of these actions seek large sums of money as damages and involve significant defense costs. We insure a portion of our professional liability risks through one of our insurance subsidiaries. Management believes our reserves for self-insured retentions and insurance coverage are sufficient to cover insured claims arising out of the operation of our facilities, although some claims may exceed the scope or amount of the coverage limits of our insurance policies. Our insurance subsidiary has entered into certain reinsurance contracts; however, the subsidiary remains liable to the extent that the reinsurers do not meet their obligations under the reinsurance contracts. If payments for claims exceed actuarially determined estimates, are not covered by insurance, or reinsurers, if any, fail to meet their obligations, our results of operations and financial position could be adversely affected.

Risks related to operations, strategy, demand and competition:

Our hospitals and other facilities face competition for patients from other hospitals and health care providers.

The health care business is highly competitive, and competition among hospitals and other health care providers for patients has intensified in recent years. Generally, other hospitals and health care facilities in the communities we

serve provide services similar to those we offer. Trends toward transparency and value-based purchasing may have an impact on our competitive position, ability to obtain and maintain favorable contract terms and patient volumes in ways that are difficult to predict. On its websites, CMS publicizes performance data related to quality measures and data on patient satisfaction surveys that hospitals, home health agencies, hospices and various other types of Medicare-certified facilities submit in connection with their Medicare reimbursement. Its Care Compare website provides an overall rating that synthesizes various quality measures into a star rating for each hospital, home health agency and hospice, among other provider types. If any of our hospitals or other provider types achieve poor results (or results that are lower than our competitors) on quality measures or on patient satisfaction surveys, our competitive position could be negatively affected. Further, hospitals are required to publish online a list of their standard charges for all items and services, including gross charges, discounted cash prices and payer-specific and de-identified minimum and maximum negotiated charges, and must also publish a consumer-friendly list of standard charges for certain “shoppable” services or, alternatively, maintain an online price estimator tool for the shoppable services. HHS also requires health insurers to publish online charges negotiated with providers for health care services, and health insurers must provide online price comparison tools to help individuals get personalized cost estimates for covered items and services. The No Surprises Act imposes additional price transparency requirements, including requiring providers to send uninsured or self-pay patients (in advance of the date of the scheduled item or service or upon request) and health plans (prior to the scheduled date of the item or service) of insured patients a good faith estimate of the expected charges and diagnostic codes. HHS is deferring enforcement of certain requirements of the No Surprises Act applicable to providing estimates for insured individuals and providing estimates to uninsured or self-pay patients that do not include expected charges for co-providers or co-facilities. It is not entirely clear how price transparency requirements will affect consumer behavior, our relationships with payers or our ability to set and negotiate prices, but our competitive position could be negatively affected if our standard charges are higher or are perceived to be higher than the charges of our competitors.

The number of freestanding specialty hospitals, surgery centers, emergency departments, urgent care centers and diagnostic and imaging centers in the geographic areas in which we operate has increased. Many individuals are seeking a broader range of services at outpatient facilities as a result of the growing availability of stand-alone outpatient health care facilities, the increase in payer reimbursement policies that restrict inpatient coverage and the increase in the services that can be provided on an outpatient basis, including high margin services. Consequently, most of our hospitals operate in a highly competitive environment, which may put pressure on our pricing, ability to contract with third-party payers and strategy for volume growth. Some of the facilities that compete with our hospitals are physician-owned or are owned by governmental agencies or not-for-profit corporations supported by endowments, charitable contributions or tax revenues and can finance capital expenditures and operations on a tax-exempt basis. Recent consolidations of not-for-profit hospital entities may intensify this competitive pressure. There is also increasing consolidation in the third-party payer industry, including vertical integration efforts among third-party payers and health care providers, and increasing efforts by payers to influence or direct the patient’s choice of provider by the use of narrow or tiered networks or other strategies. Health care industry participants are increasingly implementing physician alignment strategies, such as employing physicians, acquiring physician practice groups and participating in ACOs or other clinical integration models, which may negatively affect our competitive position, including through effects on our recruiting and retention efforts. Other industry participants, such as large employer groups and their affiliates and large retail chains, may intensify competitive pressure and affect the industry in ways that are difficult to predict.

Our hospitals compete with specialty hospitals and with freestanding ASCs and other outpatient providers with regard to certain high margin services and for quality physicians and personnel. If ASCs and other outpatient providers are better able to compete in this environment than our hospitals, our hospitals may experience a decline in patient volume, and we may experience a decrease in operating margin. In states that do not require a CON or other type of approval for the purchase, construction or expansion of health care facilities or services, competition in the form of new services, facilities and capital spending is more prevalent. Some states that have historically imposed CON or similar prior approval requirements have removed or are considering removing these requirements, which may reduce barriers to entry and increase competition in our service areas. Changes in licensure or other regulations and recognition of new provider types or payment models could also impact our competitive position. If our competitors are better able to attract patients, make capital expenditures and maintain modern and technologically upgraded facilities and equipment, recruit physicians, expand services or obtain more favorable third-party payer contracts at their facilities than our hospitals and other providers, we may experience an overall decline in patient volume. See Item 1, “Business — Competition.”

Any increase in the volume of uninsured patients or deterioration in the collectability of uninsured and patient due accounts could adversely affect our results of operations.

The primary collection risks for our accounts receivable relate to the uninsured patient accounts and patient accounts for which the primary third-party payer has paid the amounts covered by the applicable agreement, but patient responsibility amounts (exclusions, deductibles and copayments) remain outstanding. At December 31, 2025, estimated implicit price concessions of $7.674 billion had been recorded to adjust our revenues and accounts receivable to the estimated amounts we expect to collect. The estimated cost of total uncompensated care was $4.605 billion for 2025, $4.366 billion for 2024 and $3.720 billion for 2023.

Any increase in the volume of uninsured patients or deterioration in the collectability of uninsured, self-pay and other patient-responsibility accounts receivable could adversely affect our cash flows and results of operations. Our facilities may experience growth in total uncompensated care as a result of a number of factors, including conditions impacting the overall economy and unemployment levels. In addition, federal and state legislatures have in recent years considered or passed various proposals impacting the size of the uninsured or underinsured population. For example, the temporarily enhanced premium tax credits for purchasing coverage through the Exchanges that were established by COVID-19 relief legislation expired at the end of 2025. We expect their expiration will adversely impact Exchange enrollment and increase the uninsured rate. In addition, the end of the continuous enrollment requirement, also part of COVID-19 relief legislation, and the resumption of redeterminations for Medicaid enrollees in 2023 resulted in significant coverage disruptions and dis-enrollments of Medicaid enrollees, and the number of individuals enrolled in Medicaid declined in 2025 in comparison to 2024. The FBA is expected to further adversely affect the uninsured rate, including by requiring pre-enrollment verification of eligibility in a plan with premium tax credits and restricting subsidized marketplace coverage, effectively ending automatic renewals of coverage, and by limiting Medicare and Medicaid eligibility based on immigration status and other factors, among other measures. Other legislative and executive branch initiatives related to health insurance, such as permitting the sale of insurance plans that lack currently required consumer protections, could also increase rates of uninsured and underinsured individuals. It is difficult to predict what, whether, and when legislative and regulatory changes may be made in the future.

We provide uninsured discounts and charity care for individuals, including for those residing in states that choose not to implement the Medicaid expansion or that modify the terms of the program, for undocumented immigrants who are not permitted to enroll in an Exchange plan or government health care programs and for certain others who may not have insurance. Some patients may choose to enroll in lower cost Medicaid plans or other health insurance plans with lower reimbursement levels. We may also be adversely affected by the growth in patient responsibility accounts as a result of increases in the adoption of health plan structures that shift greater payment responsibility for care to individuals through greater exclusions and copayment and deductible amounts. For example, to address anticipated increases in health insurance premiums for consumers, CMS announced in September 2025 that it would expand eligibility for high-deductible catastrophic health insurance plans. Further, our ability to collect patient responsibility accounts may be limited by statutory, regulatory and investigatory initiatives, including private lawsuits directed at hospital charges and collection practices for uninsured and underinsured patients. For example, the No Surprises Act requires providers to send uninsured and self-pay patients a good faith estimate of expected charges for items and services. The estimate must cover items and services that are reasonably expected to be provided together with the primary item or services, including those that may be provided by other providers. If the uninsured or self-pay patient receives a bill that exceeds the good faith estimate by an amount deemed to be substantial by regulation (which is currently $400), they may initiate a patient-provider dispute resolution process established by regulation.

If our volume of patients with private health insurance coverage declines or we are unable to retain and negotiate favorable contracts with private third-party payers, including managed care plans, our revenues may be adversely affected.

Our ability to maintain or increase patient volumes covered by private third-party payers and to maintain and obtain favorable contracts with private third-party payers significantly affects the revenues and operating results of our facilities. Revenues derived from private third-party payers (domestic only) accounted for 48.9%, 49.5% and 49.0% of our revenues for 2025, 2024 and 2023, respectively.

Private third-party payers, including HMOs, PPOs and other managed care plans, typically reimburse health care providers at a higher rate than Medicare, Medicaid, other government health care programs or uninsured, self-pay patients. If we experience reductions in the volume of patients with private health insurance coverage, our revenues may be reduced. Factors that may cause enrollment in private health insurance to decrease include economic factors, such as increased unemployment and underemployment rates and inflationary pressures, and legislative or regulatory changes that increase barriers to and costs associated with obtaining or maintaining comprehensive coverage, including changes affecting insurance brokers and Exchange navigators, limiting automatic re-enrollment

in plans purchased through the Exchanges, or expanding short-term insurance options. We anticipate that several recent developments may adversely affect our revenues by contributing to potential future declines in our volume of patients with private health insurance coverage, including the expiration of enhanced premium tax credits, provisions of the FBA that are expected to impact coverage obtained through the Exchanges, and a final rule issued by CMS in June 2025 focused on affordability, consumer protections and integrity of the Exchanges.

Reimbursement rates are set forth by contract when our facilities are in-network, and payers utilize plan structures to encourage or require the use of in-network providers. Private third-party payers, including managed care plans and payers participating in the Exchanges, continue to demand discounted fee structures, and the ongoing trend toward consolidation among payers tends to increase their bargaining power over fee structures. Payers may utilize plan structures such as narrow networks and tiered networks that limit beneficiary provider choices, impose significantly higher cost-sharing obligations when care is obtained from providers in a disfavored tier or otherwise shift greater financial responsibility for care to individuals. Legislative and regulatory initiatives may accelerate or otherwise impact these trends. Cost-reduction strategies by large employer groups and their affiliates, such as directly contracting with a limited number of providers, may also limit our ability to negotiate favorable terms in our contracts and otherwise intensify competitive pressure.

Our ability to retain and renew our third-party payer contracts and enter into new contracts on terms favorable to us may be impacted by other health care providers. For example, some of our competitors may negotiate exclusivity provisions with managed care plans or otherwise restrict the ability of managed care plans to contract with us. Further, shifts in the payer contracts held by our competitors may impact our patient mix, which could negatively impact our revenues.

Trends toward greater price transparency may also negatively impact our ability to negotiate favorable contracts with payers. For example, hospitals are required to publish online payer-specific and de-identified minimum and maximum negotiated charges. In addition, health insurers are required to provide online price comparison tools to help individuals get personalized cost estimates for covered items and services. In addition, alignment efforts between third-party payers and health care providers and transparency requirements provide payers with increased access to performance and pricing data, which may increase payer bargaining power.

If we are unable to retain and negotiate favorable contracts with third-party payers or experience reductions in payment increases or amounts received from third-party payers or the number of patients with private health insurance coverage, our revenues may be reduced.

Changes to physician utilization practices and treatment methodologies and other factors outside our control that impact demand for medical services may reduce our revenues.

Volume, admission and case-mix trends may be impacted by factors beyond our control, such as changes in volume of certain high acuity services, variations in the prevalence and severity of outbreaks of influenza and other illnesses and medical conditions, seasonal and severe weather conditions, changes in treatment regimens and medical technology and other advances. Further, trends in physician treatment protocols and health plan design, such as health plans that shift increased costs and accountability for care to patients, could reduce our surgical volumes and admissions in favor of lower intensity and lower cost treatment methodologies or result in patients seeking care from other providers. Efforts to shift treatment to lower-acuity settings, such as the elimination of Medicare’s inpatient-only list over a three year period beginning in 2026, may reduce our inpatient volumes as various inpatient hospital procedures become eligible for reimbursement by Medicare when performed in outpatient settings and may result in patients seeking care from other providers. Additionally, our operations may be impacted by expansion of in-home acute care models. These and other factors beyond our control may reduce the demand for services we offer and decrease the reimbursement that we receive, which could have a material, adverse effect on our business, financial position and results of operations.

Third-party payer controls designed to reduce costs and other payer practices intended to decrease inpatient services, surgical procedure volumes or reimbursement for services rendered may reduce our revenues.

Controls imposed by Medicare, managed Medicare, Medicaid, managed Medicaid and private third-party payers designed to reduce admissions, intensity of services, surgical procedure volumes and lengths of stay, in some instances referred to as “utilization review,” have affected and are expected to increasingly affect our facilities. Utilization review entails the review of the admission and course of treatment of a patient by third-party payers and may involve prior authorization requirements. For example, in 2026, CMS is implementing a new payment and service delivery model, the WISeR model, under which technology vendors will use enhanced technologies, including AI, to address

compliance with Medicare coverage criteria for selected items and services under fee-for-service Medicare. Providers will be required to submit prior authorization requests or be subject to post-service, pre-payment medical review. In addition, the Medicare program issues national or local coverage determinations that restrict the circumstances under which Medicare pays for certain services. Inpatient and outpatient service utilization and inpatient occupancy rates and average lengths of stay continue to be negatively affected by third-party payers’ prior authorization requirements, coverage restrictions, utilization review and by pressure to maximize outpatient and alternative health care delivery services for less acutely ill patients. In addition, some private third-party payers have implemented downcoding policies to automatically adjust medical claims to reflect lower-cost services. Cost control efforts have resulted in an increase in reimbursement denials, negative adjustments and delays by both governmental and commercial payers, which may decrease the reimbursement we receive and may increase our costs and administrative burden, as additional resources are devoted to collection and documentation efforts. Additionally, the reimbursement we receive may decline as a result of site-neutrality initiatives, which aim to align payment for services across care settings. For example, CMS is phasing out the Medicare inpatient-only list over a three year period beginning in 2026, allowing more procedures to be performed on an outpatient basis, including in the ASC setting. Efforts to impose more stringent cost controls are expected to continue and may have a material, adverse effect on our business, financial condition and results of operations.

We may encounter difficulty acquiring hospitals and other health care businesses, encounter challenges integrating the operations of acquired hospitals and other health care businesses and/or become liable for unknown or contingent liabilities as a result of acquisitions.

A component of our business strategy is acquiring hospitals and other health care businesses. We may encounter difficulty acquiring new facilities or other businesses due to a lack of attractive opportunities or as a result of competition from other purchasers that may be willing to pay purchase prices that are higher than we believe are reasonable.

States are increasingly enacting laws modeled after the federal Hart-Scott-Rodino Act, requiring pre-notification of covered transactions. These laws may specifically target health care transactions and may have broad impacts on closing timetables and approvals. Some states require CONs in order to expand or modify existing facilities or services, and notice or approval related to a CON may be required for the transfer or change of ownership of existing facilities. In addition, the acquisition of health care facilities often involves licensure approvals or reviews and complex change of ownership processes for Medicare and other payers. Further, many states have laws that restrict the conversion or sale of not-for-profit hospitals to for-profit entities. These laws may require prior approval from, or advance notification to, the applicable states ’ attorneys general or other regulators and community involvement. Attorneys general in states without specific requirements may exercise broad discretionary authority over transactions involving the sale of not-for-profits under their general obligations to protect the use of charitable assets. These legislative and administrative efforts often focus on the appropriate valuation of the assets divested and the use of the proceeds of the sale by the non-profit seller and may include consideration of commitments for capital improvements and charity care by the purchaser. Similarly, some states require disclosures regarding structure, financing, markets, anticipated impacts and other information by certain health care entities, including hospitals and physician practices, to state attorneys general or other designated entities in advance of sales or other transactions. Also, the increasingly challenging regulatory and enforcement environment may negatively impact our ability to acquire health care businesses if they are found to have material unresolved compliance issues, such as repayment obligations. Resolving compliance issues as well as completion of oversight, review or approval processes could seriously delay or even prevent our ability to acquire hospitals or other businesses and increase our acquisition costs.

We may be unable to timely and effectively integrate hospitals and other businesses that we acquire with our ongoing operations, or we may experience delays implementing operating procedures and systems. Hospitals and other health care businesses that we acquire may have unknown or contingent liabilities, including liabilities for failure to comply with health care and other laws and regulations, medical and general professional liabilities, workers’ compensation liabilities and tax liabilities. Although we typically exclude significant liabilities from our acquisition transactions and seek indemnification from the sellers for these matters, we could experience difficulty enforcing those obligations, experience liability in excess of any indemnification obtained or otherwise incur material liabilities for the pre-acquisition conduct of acquired businesses. Such liabilities and related legal or other costs could harm our business and results of operations.

Our facilities are heavily concentrated in Florida and Texas, which makes us sensitive to regulatory, economic, public health, environmental and competitive conditions and changes in those states.

We operated 190 hospitals at December 31, 2025, and 102 of those hospitals are located in Florida and Texas. Our Florida and Texas facilities’ combined revenues represented 51% of our consolidated revenues for the year ended

December 31, 2025. This geographic concentration makes us particularly sensitive to regulatory, economic, public health, environmental and competitive conditions in those states. Any material changes in the current payment programs or regulatory, economic, public health, environmental or competitive conditions in those states could have a significant and disproportionate effect on our overall business results.

Our business and operations are subject to risks related to hurricanes, extreme weather events or other natural disasters.

Our hospitals and other facilities, including those in Florida, Texas and other coastal states, are located in regions that have been, and may in the future be, impacted by hurricanes, extreme weather events or other natural disasters, the intensity or frequency of which could be affected by changing global weather patterns. These events could result in, for example, temporary declines in the number of patients seeking our services, closures of our hospitals and related facilities, supply chain disruptions, increased costs of products, commodities and energy (including utilities) and disruptions in our information systems, which in turn could negatively impact our business and results of operations. Our business assets and activities and the communities we serve have been and could in the future be harmed by a particularly active hurricane season or even a single storm. We face the risk of losses incurred as a result of physical damage to our hospitals and related facilities and business interruptions caused by such events. We maintain property insurance coverage for claims in excess of deductibles and self-insured retention levels generally at $110 million per occurrence ($120 million effective January 1, 2026) to address the impact of physical damage to our facilities and for business interruption losses. However, such insurance coverage may be insufficient to cover our losses in excess of what we self-insure, and we may experience a material, adverse effect on our results of operations that is not recoverable through our insurance policies. Additionally, if we experience a significant increase in hurricanes, extreme weather events or other natural disasters that result in material losses we may be unable to obtain similar levels of property insurance coverage in the future.

The industry trend toward value-based purchasing may negatively impact our revenues.

There is a trend toward value-based purchasing of health care services across the health care industry among both governmental and commercial payers. Generally, value-based purchasing initiatives tie payment to the quality and efficiency of care. For example, Medicare requires hospitals, ASCs, home health agencies, hospices and other providers to report certain quality data to receive full reimbursement updates. In addition, Medicare does not reimburse for care related to certain preventable adverse events (also called “never events”) or care related to HACs, and federal law prohibits the use of federal funds under the Medicaid program to reimburse providers for medical assistance provided to treat HACs. The 25% of hospitals with the worst risk-adjusted HAC scores in the designated performance period receive a 1% reduction in their inpatient PPS Medicare payments in the applicable federal fiscal year.

Hospitals with excess readmission rates for conditions designated by CMS receive a reduction in their inpatient PPS operating Medicare payments for all Medicare inpatient discharges in the federal fiscal year, not just discharges relating to the conditions subject to the excess readmission standard. The reduction in payments to hospitals with excess readmissions can be up to 3% of a hospital’s base payments.

CMS has implemented a value-based purchasing program for inpatient hospital services that reduces inpatient hospital payments for all discharges by 2% in each federal fiscal year. CMS pools the amount collected from these reductions to fund payments to reward hospitals that meet or exceed certain quality performance standards established by CMS. CMS scores each hospital based on achievement (relative to other hospitals) and improvement (relative to the hospital’s own past performance). Hospitals that meet or exceed the quality performance standards will receive greater reimbursement under the value-based purchasing program than they would have otherwise.

CMS has developed, and is continuing to modify and develop, alternative payment models that are intended to reduce costs and improve quality of care for Medicare beneficiaries. Examples of alternative payment models include bundled payment models in which, depending on whether overall CMS spending per episode exceeds or falls below a target specified by CMS and whether quality standards are met, hospitals may receive supplemental Medicare payments or owe repayments to CMS. Generally, participation in bundled payment programs is voluntary, but some models are mandatory. For example, beginning January 2026, CMS requires hospitals in selected markets to participate in TEAM, a new model focused on five specified surgical episodes. Beginning January 2027, specialists treating heart failure and low back pain in outpatient settings in selected geographic areas will be required to participate in the Ambulatory Specialty Model. Participation in mandatory or voluntary demonstration projects, particularly demonstrations with the potential to affect payment, may negatively impact our results of operations.

The new strategic direction announced by the CMS Innovation Center in 2025 continues to support the transition from Medicare fee-for-service models to value-based payment and care delivery models. The CMS Innovation Center has signaled its intent to modify existing models to align with its current strategy and to implement new models,

indicating that features of models may include requirements that all alternative payment models involve downside risk or that some financial risk shift from conveners to providers. The CMS Innovation Center has also indicated that it plans to test improvements in Medicare Advantage and Medicaid.

There are also several state-driven value-based care initiatives. For example, some states have aligned quality metrics across payers through legislation or regulation. CMS has signaled its intent to support value-based initiatives in the Medicaid context, such as through its May 2024 final rule revising SDP arrangement requirements, which reduced state burdens to help states use SDP arrangements to implement value-based initiatives. However, the FBA’s limitations on SDP arrangements may affect states’ ability to continue or increase Medicaid value-based initiatives. In some instances, private third-party payers are also transitioning toward alternative payment models or implementing other value-based care strategies. For example, many large private third-party payers currently require hospitals to report quality data, and several private third-party payers do not reimburse hospitals for certain preventable adverse events. Further, we have implemented a policy pursuant to which we do not bill patients or third-party payers for fees or expenses incurred due to certain preventable adverse events.

We expect value-based purchasing programs, including programs that condition reimbursement on patient outcome measures, to become more common and to involve a higher percentage of reimbursement amounts. It may be difficult to predict the nature of these programs, the administrative burden involved, and their effects on our operations. It is unclear whether these and other alternative payment models will successfully coordinate care and reduce costs or whether they will decrease aggregate reimbursement. We are unable to predict our future payments or whether we will be subject to payment reductions under these programs or how this trend will affect our results of operations. If we are unable to meet or exceed the quality performance standards under any applicable value-based purchasing program, perform at a level below the outcomes demonstrated by our competitors, or otherwise fail to effectively provide or coordinate the efficient delivery of quality health care services, our reputation in the industry may be negatively impacted, we may receive reduced reimbursement amounts and we may owe repayments to payers, causing our revenues to decline.

Risks related to macroeconomic conditions:

Our overall business results may suffer during periods of significant inflation, general economic weakness or recessions or as a result of changing governmental policies.

Our business is impacted by economic conditions in the United States, including periods of significant inflation, higher interest rates or economic weakness or recessions. Also, budget deficits at the federal level and within some state and local government entities have had, and may continue to have, a negative impact on spending for health and human service programs, including Medicare, Medicaid and similar programs, which represent significant third-party payer sources for our hospitals. We anticipate that the federal deficit, the growing magnitude of Medicare and Medicaid expenditures and the aging and health status trends of the U.S. population will continue to place pressure on government health care programs, and it is possible that future legislation will mandate or otherwise result in additional Medicare and Medicaid spending reductions. There is uncertainty regarding the impact of any failure to increase the “debt ceiling,” and any U.S. government default on its debt could have broad macroeconomic effects. Further, any shutdown of the federal government, failure to enact appropriations or other lapse in appropriations, hold on congressionally authorized spending or interruptions in the distribution of governmental funds could adversely affect our financial results. Additionally, imposed or threatened tariffs have raised, and may continue to raise, the cost of certain medical supplies and products we source from outside the United States. While our response to the currently enacted tariffs has generally managed their impact on our overall cost of supplies, there can be no assurances that we will effectively be able to mitigate the effects of future changes in tariff policy. We have also experienced, and may continue to experience, supply disruptions, shortages, and other incremental costs. We cannot predict whether additional tariffs will be implemented, modified, or rescinded, nor can we predict the impact of further changes to tariff policies on our operations or financial results.

Other risks we face during periods of economic weakness and high unemployment include potential declines in the population covered under managed care agreements, increased patient decisions to postpone or cancel elective and nonemergency health care procedures (including delaying surgical procedures), which may lead to poorer health and higher acuity interventions, potential increases in the uninsured and underinsured populations, increased adoption of health plan structures that shift financial responsibility to patients and further difficulties in collecting patient receivables for copayment and deductible receivables. Further, inflationary pressures and tariffs may increase operating expenses to a greater degree and faster than reflected in updates to the reimbursement systems of governmental and private payers. General economic conditions, including inflation, when worsening or remaining volatile for an extended period of time, have and may continue to have, a negative impact on our results of operations, liquidity, ability to repay our outstanding debt and trading price of our common stock. These factors may affect the

availability, terms or timing on which we may obtain any additional funding and our ability to access our cash. There can be no assurance that we will be able to raise additional funds on terms acceptable to us, if at all.

We are exposed to market risk related to changes in the market values of securities and interest rates.

We are exposed to market risk related to changes in market values of securities. The investment securities held by our insurance subsidiaries were $588 million at December 31, 2025. These investments are carried at fair value, with changes in unrealized gains and losses related to factors other than credit loss allowances being recorded as adjustments to other comprehensive income. At December 31, 2025, we had net unrealized losses of $14 million on the insurance subsidiaries’ investment securities.

We are exposed to market risk related to market illiquidity. Investment securities of our insurance subsidiaries could be impaired by the inability to access the capital markets. Should the insurance subsidiaries require significant amounts of cash in excess of normal cash requirements to pay claims and other expenses on short notice, we may have difficulty selling these investments in a timely manner or be forced to sell them at a price less than what we might otherwise have been able to in a normal market environment. We may be required to recognize credit-related impairments on long-term investments in future periods should issuers default on interest payments or should the fair market valuations of the securities deteriorate due to ratings downgrades or other issue specific factors.

We are also exposed to market risk related to changes in interest rates that impact the amount of the interest expense we incur with respect to our floating rate obligations as well as the value of certain investments. We periodically enter into interest rate swap agreements to manage our exposure to these fluctuations. These interest rate swap agreements involve the exchange of fixed and variable rate interest payments between two parties, based on common notional principal amounts and maturity dates.

Risks related to ownership of our common stock:

There can be no assurance that we will continue to pay dividends.

The Company declares a regular quarterly cash dividend under our cash dividend program. During 2025, the Board of Directors declared four quarterly dividends of $0.72 per share, or $2.88 per share in the aggregate, on our common stock. On January 26, 2026, our Board of Directors declared a quarterly dividend of $0.78 per share on our common stock payable on March 31, 2026 to stockholders of record at the close of business on March 17, 2026.

The declaration, amount and timing of such dividends are subject to capital availability and determinations by our Board of Directors that cash dividends are in the best interest of our stockholders and are in compliance with all respective laws and our agreements applicable to the declaration and payment of cash dividends. Our ability to pay dividends will depend upon, among other factors, our cash flows from operations, our available capital and potential future capital requirements for strategic transactions, including acquisitions, debt service requirements, share repurchases and investing in our existing markets as well as our results of operations, financial condition and other factors beyond our control that our Board of Directors may deem relevant. A reduction in or suspension or elimination of our dividend payments could have a negative effect on our stock price.

Certain of our investors may continue to have influence over us.

On November 17, 2006, HCA Inc. was acquired by a private investor group, including affiliates of HCA founder, Dr. Thomas F. Frist, Jr. and certain other investors. Through their investment in Hercules Holding II, Frisco Holding II and other holdings, certain of the Frist-affiliated investors continue to hold a significant interest in our outstanding common stock (approximately 31% as of January 31, 2026). In addition, pursuant to a stockholders ’ agreement we entered into with Hercules Holding II, Frisco Holding II and the Frist-affiliated investors, certain representatives of these investors have the continued right to nominate certain of the members of our Board of Directors. As a result, certain of these investors potentially have the ability to influence our decisions to enter into corporate transactions (and the terms thereof) and prevent changes in the composition of our Board of Directors or any transaction that requires stockholder approval.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

2025 Operations Summary

Net income attributable to HCA Healthcare, Inc. totaled $6.784 billion, or $28.33 per diluted share, for 2025, compared to $5.760 billion, or $22.00 per diluted share, for 2024. The 2025 and 2024 results include gains on sales of facilities of $37 million, or $0.12 per diluted share, and $14 million, or $0.04 per diluted share, respectively. The 2024 results also include additional expenses and losses of revenues estimated at approximately $250 million, or $0.73 per diluted share, related to Hurricanes Helene and Milton, which impacted our facilities in North Carolina and certain facilities in Florida. Our provisions for income taxes for 2025 and 2024 include tax benefits of $61 million, or $0.25 per diluted share, and $102 million, or $0.39 per diluted share, respectively, related to employee equity award settlements. All “per diluted share” disclosures are based upon amounts net of the applicable income taxes. Shares used for diluted earnings per share were 239.495 million shares and 261.806 million shares for the years ended December 31, 2025 and 2024, respectively. During 2025 and 2024, we repurchased 26.739 million and 17.798 million shares, respectively, of our common stock.

Revenues increased to $75.600 billion for 2025 from $70.603 billion for 2024. Revenues increased 7.1% and 6.6%, respectively, on a consolidated basis and on a same facility basis for 2025, compared to 2024. The consolidated revenues increase can be primarily attributed to the combined impact of a 2.9% increase in equivalent admissions and a 4.0% increase in revenue per equivalent admission. The same facility revenues increase resulted primarily from the combined impact of a 2.4% increase in equivalent admissions and a 4.1% increase in revenue per equivalent admission. Our revenues from Medicaid state directed and supplemental payment programs totaled approximately $6.2 billion and $5.5 billion in 2025 and 2024, respectively.

During 2025, consolidated admissions increased 2.7% and same facility admissions increased 2.3%, compared to 2024. Inpatient surgical volumes increased 0.9% on a consolidated basis and 0.4% on a same facility basis during 2025, compared to 2024. Outpatient surgical volumes declined 0.2% on a consolidated basis and 0.5% on a same facility basis during 2025, compared to 2024. Emergency room visits increased 1.6% on a consolidated basis and 1.8% on a same facility basis during 2025, compared to 2024.

The estimated cost of total uncompensated care increased $239 million for 2025, compared to 2024. Consolidated and same facility uninsured admissions increased 1.9% and 1.2%, respectively, and consolidated and same facility uninsured emergency room visits each declined 0.6% for 2025, compared to 2024.

Interest expense totaled $2.248 billion for 2025, compared to $2.061 billion for 2024. The $187 million increase in interest expense for 2025 was primarily due to an increase in the average debt balance.

Cash flows from operating activities increased $2.122 billion, from $10.514 billion for 2024 to $12.636 billion for 2025. The increase in cash flows from operating activities was related primarily to the combined impact of a $1.319 billion increase in net income, excluding gains on sales of facilities and depreciation and amortization, positive changes in working capital of $524 million and a decline in income taxes paid of $104 million.

Business Strategy

We are committed to providing the communities we serve with high quality, convenient and cost-effective health care while growing our business and creating long-term value for our stockholders. We strive to be the health care system of choice in the communities we serve by developing comprehensive networks locally and supporting these networks with enterprise expertise and economies of scale. Our strategy is organized around a framework that seeks to drive sustained growth by delivering operational excellence, attracting exceptional physicians and other health care professionals, developing comprehensive services, creating greater access, and coordinating higher quality care for patients. To achieve these objectives, we align our efforts around the following growth agenda:

Grow Our Presence in Existing Markets. We believe we are well positioned in a number of large and growing markets that will allow us the opportunity to generate long-term, attractive growth through the expansion of our presence in these markets. We plan to continue recruiting and strategically collaborating with the physician community and developing comprehensive service lines such as cardiology, neurology, oncology, orthopedics and women’s services. Additional components of our growth strategy include providing access and convenience through developing various outpatient facilities, including, but not limited to surgery centers, urgent care clinics, freestanding emergency care facilities, imaging centers and home health and hospice services, as well as seeking to improve coordination of care and patient retention across our markets.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Business Strategy (continued)

Achieve Industry-Leading Performance in Clinical, Operational and Satisfaction Measures. Achieving high levels of patient safety, patient satisfaction and clinical quality are central goals of our business. To achieve these goals, we have implemented a number of initiatives including infection reduction initiatives, hospitalist programs, advanced health information technology and evidence-based medicine programs. We routinely analyze operational practices from our best-performing hospitals to identify ways to implement organization-wide performance improvements and reduce clinical variation. We believe these initiatives will continue to improve patient care, help us achieve cost efficiencies and favorably position us in an environment where our constituents are increasingly focused on quality, efficacy and efficiency.

Recruit and Retain Physicians and Other Health Care Professionals to Meet the Need for High Quality Health Services. We depend on the quality and dedication of the health care providers and other team members who serve at our facilities. We believe a critical component of our growth strategy is our ability to successfully recruit and strategically collaborate with physicians and other health care professionals to provide high quality care. We attract and retain physicians and other health care professionals by providing high quality, convenient facilities with advanced technology, by expanding our specialty services and by building our outpatient operations. We believe our continued investment in the employment, recruitment and retention of physicians and other health care professionals will improve the quality of care at our facilities.

Continue to Utilize Economies of Scale to Grow the Company. We believe there is significant opportunity to continue to grow our company by fully utilizing the scale and scope of our organization. We continue to invest in initiatives such as care navigators, clinical data exchange and centralized patient transfer operations, which will enable us to improve coordination of care and patient retention across our markets. We believe our centrally managed business processes and ability to leverage cost-saving practices across our extensive network will enable us to continue to manage costs effectively. We continue to invest in our shared service platforms to deploy key components of our support infrastructure, including revenue cycle management, health care group purchasing, supply chain management and staffing functions.

Pursue a Disciplined Development Strategy. We continue to believe there are significant growth opportunities in our markets. We will continue to provide financial and operational resources to analyze and develop our in-market opportunities. To complement our in-market growth agenda and achieve cost savings and other benefits for the patients and communities we serve, we intend to focus on selectively developing and acquiring new hospitals, outpatient facilities and other health care service providers.

Our strategy also emphasizes investments that seek to advance our clinical systems and digital capabilities, transform care models with innovative care solutions, expand our workforce development programs and enhance our health care networks and partnerships.

Advance Our Digital and Artificial Intelligence Capabilities. We are investing in digital, data, and artificial intelligence capabilities to improve clinical quality, enhance the experience of our patients and colleagues, and drive operational efficiency at scale. We are focused on developing and deploying secure, enterprise-grade digital and AI-enabled solutions that support clinical decision-making, streamline workflows, reduce administrative burden, and improve the coordination of care. Our strategy emphasizes the use of standardized data platforms, advanced analytics, and responsible AI practices to enable scalable innovation across clinical, operational, and administrative functions, while maintaining appropriate governance, privacy, and security controls. We believe these investments will help us improve patient outcomes, address workforce challenges, enhance efficiencies, and strengthen our ability to deliver high-quality, cost-effective care over the long term. However, our ability to realize these expected benefits is subject to known and unknown risks and uncertainties.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Critical Accounting Policies and Estimates

The preparation of our consolidated financial statements requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities, the disclosure of contingent liabilities and the reported amounts of revenues and expenses. Our estimates are based on historical experience and various other assumptions we believe are reasonable under the circumstances. We evaluate our estimates on an ongoing basis and make changes to the estimates and related disclosures as experience develops or new information becomes known. Actual results may differ from these estimates.

We believe the following critical accounting policies affect our more significant judgments and estimates used in the preparation of our consolidated financial statements.

Revenues

Revenues are recorded during the period the health care services are provided, based upon the estimated amounts due from payers. Estimates of contractual adjustments under managed care health plans are based upon the payment terms specified in the related contractual agreements. Laws and regulations governing the Medicare and Medicaid programs are complex and subject to interpretation. The estimated reimbursement amounts are made on a payer-specific basis and are recorded based on the best information available regarding management’s interpretation of the applicable laws, regulations and contract terms. Management continually reviews the contractual estimation process to consider and incorporate updates to laws and regulations and the frequent changes in managed care contractual terms resulting from contract renegotiations and renewals. We have invested significant resources to refine and improve our billing systems and the information system data used to make contractual adjustment estimates. We have developed standardized calculation processes and related employee training programs to improve the utility of our patient accounting systems.

Patients treated at hospitals for non-elective care who have income at or below 400% of the federal poverty level are eligible for charity care, and we limit the patient responsibility amounts for these patients to a percentage of their annual household income, computed on a sliding scale based upon their annual income and the applicable percentage of the federal poverty level. Patients treated at hospitals for non-elective care who have income above 400% of the federal poverty level are eligible for certain other discounts which limit the patient responsibility amounts for these patients to a percentage of their annual household income, computed on a sliding scale based upon their annual income and the applicable percentage of the federal poverty level. We apply additional discounts to limit patient responsibility for certain emergency services. The federal poverty level is established by the federal government and is based on income and family size. Because we do not pursue collection of amounts determined to qualify as charity care, they are not reported in revenues. We provide discounts to uninsured patients who do not qualify for Medicaid or charity care. We may provide assistance to uninsured patients to help determine whether they may qualify for Medicaid, other federal or state assistance, or charity care. If an uninsured patient does not qualify for these programs, the uninsured discount is applied.

Implicit price concessions relate primarily to amounts due directly from patients. Estimated implicit price concessions are recorded for all uninsured accounts, regardless of the age of those accounts. Accounts are written off when all reasonable collection efforts have been performed. The estimates for implicit price concessions are based upon management’s assessment of historical writeoffs and expected net collections, business and economic conditions, trends in federal, state and private employer health care coverage and other collection indicators. Management relies on the results of detailed reviews of historical writeoffs and collections at facilities that represent a majority of our revenues and accounts receivable (the “hindsight analysis”) as a primary source of information in estimating the collectability of our accounts receivable. We perform the hindsight analysis quarterly, utilizing rolling twelve-months accounts receivable collection and writeoff data. We believe our quarterly updates to the estimated implicit price concession amounts at each of our hospital facilities provide reasonable estimates of our revenues and valuations of our accounts receivable. These routine, quarterly changes in estimates have not resulted in material adjustments to the valuations of our accounts receivable or period-to-period comparisons of our revenues.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Critical Accounting Policies and Estimates (continued)

Revenues (continued)

To quantify the total impact of and trends related to uninsured patient accounts, we believe it is beneficial to view total uncompensated care, which is comprised of charity care, uninsured discounts and implicit price concessions. A summary of the estimated cost of total uncompensated care for the years ended December 31, follows (dollars in millions):

Patient care costs (salaries and benefits, supplies, other operating

expenses and depreciation and amortization)

Cost-to-charges ratio (patient care costs as percentage of gross

patient charges)

Total uncompensated care

Multiply by the cost-to-charges ratio

Estimated cost of total uncompensated care

Management expects a continuation of the challenges related to collection of patient due accounts. Adverse changes in the percentage of our patients having adequate health care coverage, increases in patient responsibility amounts under certain health care coverages, general economic conditions, patient accounting service center operations, payer mix, or trends in federal, state, and private employer health care coverage could affect the collection of accounts receivable, cash flows and results of operations. See Item 1, “Business — Developments in Health Care Public Policy.”

Professional Liability Reserves

We, along with virtually all health care providers, operate in an environment with professional liability risks. Our facilities are insured by one of our insurance subsidiaries for losses up to $110 million per occurrence ($120 million effective January 1, 2026), subject, in most cases, to a $15 million per occurrence self-insured retention. The insurance subsidiary has obtained reinsurance for professional liability risks generally above a retention level of either $25 million or $35 million per occurrence, depending on the jurisdiction for the related claim. We purchase excess insurance on an occurrence reported basis for losses in excess of amounts insured by our insurance subsidiary. Provisions for losses related to professional liability risks were $651 million, $627 million and $619 million for the years ended December 31, 2025, 2024 and 2023, respectively.

Reserves for professional liability risks represent the estimated ultimate cost of all reported and unreported losses incurred through the respective consolidated balance sheet dates. The estimated ultimate cost includes estimates of direct expenses and fees paid to outside counsel and experts, but does not include the general overhead costs of our insurance subsidiary or corporate office. Individual case reserves are established based upon the particular circumstances of each reported claim and represent our estimates of the future costs that will be paid on reported claims. Case reserves are reduced as claim payments are made and are adjusted upward or downward as our estimates regarding the amounts of future losses are revised. Once the case reserves for known claims are determined, information is stratified by loss layers and retentions, accident years, reported years, and geographic location of our hospitals. Several actuarial methods are employed to utilize this data to produce estimates of ultimate losses and reserves for incurred but not reported claims, including: paid and incurred extrapolation methods utilizing paid and incurred loss development to estimate ultimate losses; frequency and severity methods utilizing paid and incurred claims development to estimate ultimate average frequency (number of claims) and ultimate average severity (cost per claim); and Bornhuetter-Ferguson methods which add expected development to actual paid or incurred experience to estimate ultimate losses. These methods use our company-specific historical claims data and other information. Company-specific claim reporting and payment data collected over an approximate 20-year period is used in our reserve estimation process. This company-specific data includes information regarding our business, including historical paid losses and loss adjustment expenses, historical and current case loss reserves, actual and projected hospital statistical data, professional liability retentions for each policy year, geographic information and other data.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Critical Accounting Policies and Estimates (Continued)

Professional Liability Reserves (continued)

Reserves and provisions for professional liability risks are based upon actuarially determined estimates. The estimated reserve ranges, net of amounts receivable under reinsurance contracts, were $1.883 billion to $2.251 billion at December 31, 2025 and $1.855 billion to $2.221 billion at December 31, 2024. Our estimated reserves for professional liability risks may change significantly if future claims differ from expected trends. We perform sensitivity analyses which model the volatility of key actuarial assumptions and monitor our reserves for adequacy relative to all our assumptions in the aggregate. Based on our analysis, we believe the estimated professional liability reserve ranges represent the reasonably likely outcomes for ultimate losses. We consider the number and severity of claims to be the most significant assumptions in estimating reserves for professional liabilities. A 2.5% change in the expected frequency trend could be reasonably likely and would increase the reserve estimate by $33 million or reduce the reserve estimate by $32 million. A 2.5% change in the expected claim severity trend could be reasonably likely and would increase the reserve estimate by $126 million or reduce the reserve estimate by $117 million. We believe adequate reserves have been recorded for our professional liability risks; however, due to the complexity of the claims, the extended period of time to resolve the claims and the wide range of potential outcomes, our ultimate liability for professional liability risks could change by more than the estimated sensitivity amounts and could change materially from our current estimates.

The reserves for professional liability risks cover approximately 2,360 and 2,120 individual claims at December 31, 2025 and 2024, respectively, and estimates for unreported potential claims. The time period required to resolve these claims can vary depending upon the jurisdiction and whether the claim is settled or litigated. The average time period between the occurrence and final resolution for our professional liability claims is approximately five years, although the facts and circumstances of each individual claim can result in an occurrence-to-resolution timeframe that varies from this average. The estimation of the timing of payments beyond a year can vary significantly.

Reserves for professional liability risks were $2.044 billion and $2.131 billion at December 31, 2025 and 2024, respectively. The current portion of these reserves, $578 million and $587 million at December 31, 2025 and 2024, respectively, is included in “other accrued expenses.” Obligations covered by reinsurance and excess insurance contracts are included in the reserves for professional liability risks, as we remain liable to the extent reinsurers and excess insurance carriers do not meet their obligations. Reserves for professional liability risks (net of $47 million and $80 million receivable under reinsurance and excess insurance contracts at December 31, 2025 and 2024, respectively) were $1.997 billion and $2.051 billion at December 31, 2025 and 2024, respectively. The estimated total net reserves for professional liability risks at December 31, 2025 and 2024 are comprised of $1.124 billion and $1.059 billion, respectively, of case reserves for known claims and $873 million and $992 million, respectively, of reserves for incurred but not reported claims. The 2025 increase in case reserves for known claims and the corresponding decrease in reserves for incurred but not reported claims is the result of changes in case management processes at our insurance subsidiary that include establishing case reserve estimates earlier and resolving claims quicker.

Changes in our professional liability reserves, net of reinsurance recoverable, for the years ended December 31, are summarized in the following table (dollars in millions):

Net reserves for professional liability claims, January 1

Provision for current year claims

Unfavorable development related to prior years’ claims

Total provision

Payments for current year claims

Payments for prior years’ claims

Total claim payments

Effect of new retroactive reinsurance contracts

Net reserves for professional liability claims, December 31

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Critical Accounting Policies and Estimates (Continued)

Income Taxes

We calculate our provision for income taxes using the asset and liability method, under which deferred tax assets and liabilities are recognized by identifying the temporary differences that arise from the recognition of items in different periods for tax and accounting purposes. Deferred tax assets generally represent the tax effects of amounts expensed in our income statement for which tax deductions will be claimed in future periods. Interest and penalties payable to taxing authorities are included as a component of our provision for income taxes. We have elected to treat taxes incurred on global intangible low-taxed income as a period expense.

Although we believe we have properly reported taxable income and paid taxes in accordance with applicable laws, federal, state or foreign taxing authorities may challenge our tax positions upon audit. Significant judgment is required in determining and assessing the impact of uncertain tax positions. We report a liability for unrecognized tax benefits from uncertain tax positions taken or expected to be taken in our income tax returns. During each reporting period, we assess the facts and circumstances related to uncertain tax positions. If the realization of unrecognized tax benefits is deemed probable based upon new facts and circumstances, the estimated liability and the provision for income taxes are reduced in the current period. Final audit results may vary from our estimates.

Results of Operations

Revenue/Volume Trends

Our revenues depend upon inpatient occupancy levels, the ancillary services and therapy programs ordered by physicians and provided to patients, the volume of outpatient procedures and the charge and negotiated payment rates for such services. Gross charges typically do not reflect what our facilities are actually paid. Our facilities have entered into agreements with third-party payers, including government programs and managed care health plans, under which the facilities are paid based upon the cost of providing services, predetermined rates per diagnosis, fixed per diem rates or discounts from gross charges. We do not pursue collection of amounts related to patients who meet our guidelines to qualify for charity care; therefore, they are not reported in revenues. We provide discounts to uninsured patients who do not qualify for Medicaid or charity care.

Revenues increased 7.1% to $75.600 billion for 2025 from $70.603 billion for 2024 and increased 8.7% for 2024 from $64.968 billion for 2023. The increase in revenues in 2025 can be primarily attributed to the combined impact of a 2.9% increase in equivalent admissions and a 4.0% increase in revenue per equivalent admission compared to the prior year. The increase in revenues in 2024 can be primarily attributed to the combined impact of a 5.3% increase in equivalent admissions and a 3.2% increase in revenue per equivalent admission compared to the prior year.

Same facility revenues increased 6.6% for the year ended December 31, 2025 compared to the year ended December 31, 2024 and increased 7.9% for the year ended December 31, 2024 compared to the year ended December 31, 2023. The 6.6% increase for 2025 can be primarily attributed to the combined impact of a 2.4% increase in equivalent admissions and a 4.1% increase in revenue per equivalent admission. The 7.9% increase for 2024 can be primarily attributed to the combined impact of a 4.5% increase in equivalent admissions and a 3.2% increase in revenue per equivalent admission.

Consolidated admissions increased 2.7% during 2025 compared to 2024 and increased 5.0% during 2024 compared to 2023. Consolidated inpatient surgical volumes increased 0.9% during 2025 compared to 2024 and increased 2.2% during 2024 compared to 2023. Consolidated outpatient surgical volumes declined 0.2% during 2025 compared to 2024 and declined 1.9% during 2024 compared to 2023. Consolidated emergency room visits increased 1.6% during 2025 compared to 2024 and increased 4.8% during 2024 compared to 2023.

Same facility admissions increased 2.3% during 2025 compared to 2024 and increased 4.9% during 2024 compared to 2023. Same facility inpatient surgical volumes increased 0.4% during 2025 compared to 2024 and increased 2.2% during 2024 compared to 2023. Same facility outpatient surgical volumes declined 0.5% during 2025 compared to 2024 and declined 1.6% during 2024 compared to 2023. Same facility emergency room visits increased 1.8% during 2025 compared to 2024 and increased 4.9% during 2024 compared to 2023.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Results of Operations (continued)

Revenue/Volume Trends (continued)

Same facility uninsured emergency room visits declined 0.6% and same facility uninsured admissions increased 1.2% during 2025 compared to 2024. Same facility uninsured emergency room visits increased 13.5% and same facility uninsured admissions increased 1.0% during 2024 compared to 2023.

The approximate percentages of our admissions related to Medicare, managed Medicare, Medicaid, managed Medicaid, managed care and insurers and the uninsured for the years ended December 31, 2025, 2024 and 2023 are set forth below.

Years Ended December 31,

Medicare

Managed Medicare

Medicaid

Managed Medicaid

Managed care and insurers

Uninsured

The approximate percentages of our inpatient revenues related to Medicare, managed Medicare, Medicaid, managed Medicaid, and managed care and insurers for the years ended December 31, 2025, 2024 and 2023 are set forth below.

Years Ended December 31,

Medicare

Managed Medicare

Medicaid

Managed Medicaid

Managed care and insurers

At December 31, 2025, we owned and operated 47 hospitals and 27 surgery centers in the state of Florida. Our Florida facilities’ revenues totaled $17.856 billion, $16.600 billion and $14.990 billion for the years ended December 31, 2025, 2024 and 2023, respectively. At December 31, 2025, we owned and operated 55 hospitals and 38 surgery centers in the state of Texas. Our Texas facilities’ revenues totaled $20.962 billion, $19.832 billion and $17.871 billion for the years ended December 31, 2025, 2024 and 2023, respectively. During 2025, 2024 and 2023, 59%, 59% and 58%, respectively, of our admissions and 51%, 52% and 51%, respectively, of our revenues were generated by our Florida and Texas facilities. Uninsured admissions in Florida and Texas represented 73%, 74% and 73%, respectively, of our uninsured admissions during 2025, 2024 and 2023.

We receive a significant portion of our revenues from government health programs, principally Medicare and Medicaid, which are highly regulated and subject to frequent and substantial changes. Some states make additional payments to providers through the Medicaid program that are separate from base payments. These payments may be in the form of payments, such as upper payment limit payments, that are intended to address the difference between Medicaid fee-for-service payments and Medicare reimbursement rates, or payments under other programs that vary by state under waivers authorized by Section 1115 of the Social Security Act. In addition, many states have implemented state directed payment (“SDP”) arrangements to direct certain Medicaid managed care plan expenditures. These payments are generally authorized by the Centers for Medicare & Medicaid Services (“CMS”) and subject to periodic extension or reapproval. Most states in which we receive payment have adopted statewide or local provider taxes to fund the non-federal share of Medicaid programs. SDP arrangements and other additional payments supplement Medicaid base rates, which combined are generally insufficient to cover the cost of care provided to Medicaid beneficiaries after accounting for the costs of financing the non-federal share of Medicaid payments, such as the state or local provider taxes levied.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Results of Operations (continued)

Revenue/Volume Trends (continued)

We are aware these payment programs are currently being reviewed by certain government agencies, and some states requested modifications of their existing supplemental payment programs during the annual renewal process with CMS. It is possible these reviews and requests will result in the restructuring of such supplemental payment programs and could result in the payment programs being reduced or eliminated. Further, the FBA makes significant changes to Medicaid financing mechanisms, including limitations on provider taxes and SDP arrangements. However, the FBA grandfathers certain SDP arrangements, including those for which an application form was submitted to CMS prior to July 4, 2025, for the rating period occurring within 180 days of July 4, 2025, and those that received approval or made a good faith effort to receive approval from CMS prior to May 1, 2025. Certain states in which we operate have submitted application forms to CMS for approval where the grandfathered payments we receive could be impacted, and in some instances, increased. Beginning with the rating period on or after January 1, 2028, grandfathered payments will be reduced by 10 percentage points annually until they reach the allowable payment limits. Some states have received approval of grandfathered applications, but we are unable to predict the timing or extent of any additional approvals by CMS and the resulting recognition of the related revenues. Excluding the expected impact of any additional approvals, we expect revenues from SDP arrangements to decline in 2026 compared to 2025. We also expect certain administrative reforms relating to the Exchanges and the expiration of the enhanced premium tax credits at the end of 2025 to adversely affect our results of operations in 2026, offset in part by our ongoing resiliency efforts.

Key Performance Indicators

We present certain metrics and statistical information that management uses when assessing our results of operations. We believe this information is useful to investors as it provides insight to how management evaluates operational performance and trends between reporting periods. Information on how these metrics and statistical information are defined is provided in the following tables summarizing operating results and operating data.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Results of Operations (continued)

Operating Results Summary

The following are comparative summaries of operating results and certain operating data for the years ended December 31, 2025, 2024 and 2023 (dollars in millions):

Amount

Ratio

Amount

Ratio

Amount

Ratio

Revenues

Salaries and benefits

Supplies

Other operating expenses

Equity in earnings of affiliates

Depreciation and amortization

Interest expense

Losses (gains) on sales of facilities

Income before income taxes

Provision for income taxes

Net income

Net income attributable to noncontrolling interests

Net income attributable to HCA Healthcare, Inc.

% changes from prior year:

Revenues

Income before income taxes

Net income attributable to HCA Healthcare, Inc.

Admissions(a)

Equivalent admissions(b)

Revenue per equivalent admission

Same facility % changes from prior year(c):

Revenues

Admissions(a)

Equivalent admissions(b)

Revenue per equivalent admission

Represents the total number of patients admitted to our hospitals and is used by management and certain investors as a general measure of inpatient volume.

Equivalent admissions are used by management and certain investors as a general measure of combined inpatient and outpatient volume. Equivalent admissions are computed by multiplying admissions (inpatient volume) by the sum of gross inpatient revenue and gross outpatient revenue and then dividing the resulting amount by gross inpatient revenue. The equivalent admissions computation “equates” outpatient revenue to the volume measure (admissions) used to measure inpatient volume, resulting in a general measure of combined inpatient and outpatient volume.

Same facility information excludes the operations of hospitals and their related facilities that were either acquired, divested or removed from service during the current and prior year.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Results of Operations (continued)

Operating Results Summary (continued)

Operating Data:

Number of hospitals at end of period

Number of freestanding outpatient surgery centers at end of period(a)

Number of licensed beds at end of period(b)

Weighted average beds in service(c)

Admissions(d)

Equivalent admissions(e)

Average length of stay (days)(f)

Average daily census(g)

Occupancy rate(h)

Emergency room visits(i)

Outpatient surgeries(j)

Inpatient surgeries(k)

Days revenues in accounts receivable(l)

Outpatient revenues as a % of patient revenues(m)

Excludes freestanding endoscopy centers (31 at December 31, 2025, 26 at December 31, 2024 and 24 at December 31, 2023).

Licensed beds are those beds for which a facility has been granted approval to operate from the applicable state licensing agency.

Represents the average number of beds in service, weighted based on periods owned.

Represents the total number of patients admitted to our hospitals and is used by management and certain investors as a general measure of inpatient volume.

Equivalent admissions are used by management and certain investors as a general measure of combined inpatient and outpatient volume. Equivalent admissions are computed by multiplying admissions (inpatient volume) by the sum of gross inpatient revenue and gross outpatient revenue and then dividing the resulting amount by gross inpatient revenue. The equivalent admissions computation “equates” outpatient revenue to the volume measure (admissions) used to measure inpatient volume, resulting in a general measure of combined inpatient and outpatient volume.

Represents the average number of days admitted patients stay in our hospitals.

Represents the average number of admitted patients in our hospital beds each day.

Represents the percentage of hospital beds in service that are occupied by patients (admitted and observations). Both average daily census and occupancy rate provide measures of the utilization of inpatient rooms.

Represents the number of patients treated in our emergency rooms.

Represents the number of surgeries performed on patients who were not admitted to our hospitals. Pain management and endoscopy procedures are not included in outpatient surgeries.

Represents the number of surgeries performed on patients who have been admitted to our hospitals. Pain management and endoscopy procedures are not included in inpatient surgeries.

Revenues per day is calculated by dividing the revenues for the fourth quarter of each year by the days in the quarter. Days revenues in accounts receivable is then calculated as accounts receivable at the end of the period divided by revenues per day.

Represents the percentage of patient revenues related to patients who are not admitted to our hospitals.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Results of Operations (continued)

Years Ended December 31, 2025 and 2024

Net income attributable to HCA Healthcare, Inc. totaled $6.784 billion, or $28.33 per diluted share, for 2025, compared to $5.760 billion, or $22.00 per diluted share, for 2024. The 2025 and 2024 results include gains on sales of facilities of $37 million, or $0.12 per diluted share, and $14 million, or $0.04 per diluted share, respectively. The 2024 results also include additional expenses and losses of revenues estimated at approximately $250 million, or $0.73 per diluted share, related to Hurricanes Helene and Milton, which impacted our facilities in North Carolina and certain facilities in Florida. Our provisions for income taxes for 2025 and 2024 include tax benefits of $61 million, or $0.25 per diluted share, and $102 million, or $0.39 per diluted share, respectively, related to employee equity award settlements. All “per diluted share” disclosures are based upon amounts net of the applicable income taxes. Shares used for diluted earnings per share were 239.495 million shares and 261.806 million shares for the years ended December 31, 2025 and 2024, respectively. During 2025 and 2024, we repurchased 26.739 million and 17.798 million shares, respectively, of our common stock.

During 2025, consolidated admissions increased 2.7% and same facility admissions increased 2.3% compared to 2024. Consolidated inpatient surgeries increased 0.9% and same facility inpatient surgeries increased 0.4% during 2025 compared to 2024. Emergency room visits increased 1.6% on a consolidated basis and increased 1.8% on a same facility basis during 2025 compared to 2024.

Revenues increased 7.1% to $75.600 billion for 2025 from $70.603 billion for 2024. The increase in revenues was due primarily to the combined impact of a 2.9% increase in equivalent admissions and a 4.0% increase in revenue per equivalent admission compared to 2024. Same facility revenues increased 6.6% due primarily to the combined impact of a 2.4% increase in equivalent admissions and a 4.1% increase in revenue per equivalent admission compared to 2024. Our revenues from Medicaid state directed and supplemental payment programs totaled approximately $6.2 billion and $5.5 billion in 2025 and 2024, respectively.

Salaries and benefits, as a percentage of revenues, were 43.5% in 2025 and 44.1% in 2024. Salaries and benefits per equivalent admission increased 2.4% in 2025 compared to 2024. Same facility salaries and benefits per full time equivalent increased 3.3% for 2025 compared to 2024. We continue to utilize certain contract, overtime and other premium rate labor costs to support our clinical staff and patients. While these labor costs have declined compared to the prior year period, future costs may be affected by labor market conditions and other factors. Share-based compensation expense was $401 million in 2025 and $360 million in 2024.

Supplies, as a percentage of revenues, were 15.0% in 2025 and 15.2% in 2024. Supply costs per equivalent admission increased 2.7% in 2025 compared to 2024. Supply costs per equivalent admission increased 7.0% for medical devices and 0.3% for general medical and surgical items, but declined 4.0% for pharmacy supplies in 2025 compared to 2024. The increase in supply costs per equivalent admission for medical devices is primarily related to cardiovascular technologies. The decline in supply costs per equivalent admission for pharmacy supplies is primarily related to a decrease in the costs of certain drugs.

Other operating expenses, as a percentage of revenues, were 21.0% in both 2025 and 2024. Other operating expenses are primarily comprised of contract services, professional fees, repairs and maintenance, rents and leases, utilities, insurance (including professional liability insurance) and nonincome taxes. We have seen inflation have a negative impact on certain of these expenses and expect inflationary pressures will continue to impact operating expenses in 2026.

Equity in earnings of affiliates was $78 million for 2025 and $23 million for 2024.

Depreciation and amortization, as a percentage of revenues, were 4.6% in 2025 and 4.7% in 2024. Depreciation expense was $3.508 billion for 2025 and $3.294 billion for 2024. The increase of $214 million in depreciation expense relates primarily to capital expenditures at our existing facilities.

Interest expense increased to $2.248 billion for 2025 from $2.061 billion for 2024. The $187 million increase in interest expense was primarily due to an increase in the average debt balance. The average effective interest rate for our long-term debt was 5.0% for both 2025 and 2024. Our average debt balance was $44.731 billion for 2025 compared to $41.388 billion for 2024.

Gains on sales of facilities were $37 million for 2025 and $14 million for 2024.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Results of Operations (continued)

Years Ended December 31, 2025 and 2024 (continued)

The effective income tax rate was 23.2% for 2025 and 24.5% for 2024, excluding net income attributable to noncontrolling interests as it relates to consolidated partnerships. The decline in the effective tax rate for 2025 is due to a net increase in our 2024 tax provision related to an internal restructuring of certain affiliates and adjustments to our liability for unrecognized tax benefits. Our provisions for income taxes for 2025 and 2024 included tax benefits of $61 million and $102 million, respectively, related to employee equity award settlements.

Net income attributable to noncontrolling interests increased from $897 million for 2024 to $998 million for 2025. The increase in net income attributable to noncontrolling interests related primarily to the operations of two of our Texas markets.

For results of operations comparisons relating to years ending December 31, 2024 and 2023, refer to our annual report on Form 10-K, Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations for the year ended December 31, 2024, filed with the Securities and Exchange Commission (“SEC”) on February 13, 2025.

Liquidity and Capital Resources

Our primary cash requirements are paying our operating expenses, servicing our debt, capital expenditures on our existing properties, acquisitions of hospitals and health care entities, repurchases of our common stock, dividends to stockholders and distributions to noncontrolling interests. Our primary cash sources are from operating activities, issuances of debt securities and sales of hospitals and health care entities.

Cash provided by operating activities totaled $12.636 billion in 2025 compared to $10.514 billion in 2024 and $9.431 billion in 2023. The $2.122 billion increase in cash provided by operating activities for 2025, compared to 2024, was related primarily to the combined impact of a $1.319 billion increase in net income, excluding gains on sales of facilities and depreciation and amortization, positive changes in working capital of $524 million and a decline in income taxes paid of $104 million. The $1.083 billion increase in cash provided by operating activities for 2024, compared to 2023, was related primarily to an increase in net income of $542 million, excluding losses and gains on sales of facilities, and a positive change in working capital items of $351 million, mainly from a decline in inventories and other assets. Cash payments for interest and income taxes increased $165 million for 2025 compared to 2024. We had negative working capital of $567 million at December 31, 2025 and positive working capital of $1.237 billion at December 31, 2024. The decline in working capital is primarily due to the decline of $893 million in cash and cash equivalents and an increase in current liabilities of $1.173 billion, including $2.207 billion of outstanding commercial paper notes (short-term borrowings). We have the ability to refinance our outstanding commercial paper notes with our senior unsecured credit facility on a long-term basis. Excluding the impact of our outstanding commercial paper notes, our working capital at December 31, 2025 would have been $1.640 billion.

Cash used in investing activities was $4.988 billion, $4.933 billion and $5.317 billion in 2025, 2024 and 2023, respectively. Excluding acquisitions, capital expenditures were $4.944 billion in 2025, $4.875 billion in 2024 and $4.744 billion in 2023. Planned capital expenditures are expected to approximate between $5.0 billion and $5.5 billion in 2026. At December 31, 2025, there were projects under construction which had an estimated additional cost to complete and equip over the next five years of approximately $7.1 billion. We expect to fund capital expenditures with internally generated and borrowed funds. We expended $397 million, $266 million and $635 million for acquisitions of hospitals and health care entities during 2025, 2024 and 2023, respectively. Cash flows from sales of hospitals and health care entities were $269 million of net proceeds for 2025, $328 million of net proceeds for 2024 and $193 million of net proceeds for 2023.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Liquidity and Capital Resources (continued)

Cash used in financing activities totaled $8.550 billion in 2025, $4.582 billion in 2024 and $4.094 billion in 2023. During 2025, we had a net increase of $3.287 billion in our indebtedness, paid dividends of $679 million and paid $10.067 billion for repurchases of common stock. During 2024, we had a net increase of $3.205 billion in our indebtedness, paid dividends of $690 million and paid $6.042 billion for repurchases of common stock. During 2023, we had a net increase of $1.295 billion in our indebtedness, paid dividends of $661 million and paid $3.811 billion for repurchases of common stock. During 2025, 2024 and 2023, we made distributions to noncontrolling interests of $827 million, $711 million and $640 million, respectively.

We, or our affiliates, may in the future repurchase portions of our debt or equity securities, subject to certain limitations, from time to time in either the open market or through privately negotiated transactions, in accordance with applicable SEC and other legal requirements. The timing, prices, and sizes of purchases depend upon prevailing trading prices, general economic and market conditions, and other factors, including applicable securities laws.

During January 2024, January 2025 and January 2026, our Board of Directors authorized $6 billion, $10 billion and $10 billion, respectively, for share repurchases of the Company’s outstanding common stock. The January 2024 authorization was completed during 2025, and at December 31, 2025, there was $750 million of share repurchase authorization that remained available under the January 2025 authorization. Funds for the repurchase of debt or equity securities have, and are expected to, come primarily from cash generated from operations and borrowed funds.

During 2025, our Board of Directors declared four quarterly dividends of $0.72 per share, or $2.88 per share in the aggregate, on our common stock. On January 26, 2026, our Board of Directors declared a quarterly dividend of $0.78 per share on our common stock payable on March 31, 2026 to stockholders of record at the close of business on March 17, 2026. The timing and amount of future cash dividends will vary based on a number of factors, including future capital requirements for strategic transactions, share repurchases and investing in our existing markets, the availability of financing on acceptable terms, debt service requirements, changes to applicable tax laws or corporate laws, changes to our business model and periodic determinations by our Board of Directors that cash dividends are in the best interest of stockholders and are in compliance with all applicable laws and agreements of the Company.

In addition to cash flows from operations, available sources of capital include amounts available under our senior unsecured credit facility ($5.779 billion and $5.664 billion available as of December 31, 2025 and January 31, 2026, respectively, after giving effect to all issued and outstanding letters of credit and our intention to maintain a minimum available borrowing capacity equal to the aggregate amount outstanding under the commercial paper program ($2.207 billion and $2.322 billion as of December 31, 2025 and January 31, 2026, respectively) and anticipated access to public and private debt markets.

Investments of our insurance subsidiaries, held to maintain statutory equity levels and to provide liquidity to pay claims, totaled $588 million and $657 million at December 31, 2025 and 2024, respectively. An insurance subsidiary maintained net reserves for professional liability risks of $91 million and $127 million at December 31, 2025 and 2024, respectively. Our facilities are insured by one of our insurance subsidiaries for losses up to $110 million per occurrence ($120 million effective January 1, 2026); however, this coverage is subject, in most cases, to a $15 million per occurrence self-insured retention. Net reserves for the self-insured professional liability risks retained were $1.906 billion and $1.924 billion at December 31, 2025 and 2024, respectively. Claims payments, net of reinsurance recoveries, during the next 12 months are expected to approximate $568 million. We estimate that approximately $524 million of the expected net claim payments during the next 12 months will relate to claims subject to the self-insured retention.

Financing Activities

We have significant debt service requirements. Our debt totaled $46.492 billion and $43.031 billion at December 31, 2025 and 2024, respectively. Our interest expense was $2.248 billion for 2025 and $2.061 billion for 2024.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Liquidity and Capital Resources (continued)

Financing Activities (continued)

During 2025, we entered into a new credit agreement that provides for $8.000 billion of senior unsecured revolving credit commitments with a term of five years (“senior unsecured credit facility”). Borrowings under the senior unsecured credit facility bear interest at a rate equal to the Secured Overnight Financing Rate plus 1.125% (plus, until October 23, 2025, a 0.10% credit spread adjustment, as the unsecured credit facility was amended on that date to remove the credit spread adjustment). We terminated our $4.500 billion senior secured asset-based revolving credit facility, our $3.500 billion senior secured revolving cash flow credit facility and our senior secured term loan facility of $1.238 billion. Finance leases and other secured debt totaled $1.021 billion at December 31, 2025.

During 2025, we issued $5.250 billion aggregate principal amount of senior notes comprised of (i) $700 million aggregate principal amount of 5.000% senior notes due 2028, (ii) $300 million aggregate principal amount of floating rate senior notes due 2028, (iii) $750 million aggregate principal amount of 5.250% senior notes due 2030, (iv) $750 million aggregate principal amount of 5.500% senior notes due 2032, (v) $1.500 billion aggregate principal amount of 5.750% senior notes due 2035 and (vi) $1.250 billion aggregate principal amount of 6.200% senior notes due 2055. We used the net proceeds to repay borrowings under the senior unsecured credit facility and for general corporate purposes.

During 2025, we also issued $3.250 billion aggregate principal amount of senior notes comprised of (i) $500 million aggregate principal amount of 4.300% senior notes due 2030, (ii) $1.000 billion aggregate principal amount of 4.600% senior notes due 2032, (iii) $1.000 billion aggregate principal amount of 4.900% senior notes due 2035 and (iv) $750 million aggregate principal amount of 5.700% senior notes due 2055. We used the net proceeds to repay borrowings under the commercial paper program and for general corporate purposes.

During 2025, we established a commercial paper program under which we may issue unsecured commercial paper notes from time to time up to a maximum aggregate face or principal amount of $4.000 billion outstanding at any time. Amounts available under the program may be borrowed, repaid and reborrowed from time to time. The maturities of the commercial paper notes borrowings may vary, but will not exceed 397 days from the date of issue, and the proceeds from the program will be used for general corporate purposes. In connection with the commercial paper program, we intend to maintain a minimum available borrowing capacity under our $8.000 billion senior unsecured credit facility equal to the aggregate amount outstanding under the commercial paper program. At December 31, 2025, we had $2.207 billion of commercial paper outstanding, and there were no borrowings outstanding under our senior unsecured credit facility.

During 2025, we repaid at maturity all $2.600 billion aggregate principal amount of 5.375% senior notes, all $1.400 billion aggregate principal amount of 5.25% senior notes, $291 million aggregate principal amount of 7.69% senior notes and $125 million aggregate principal amount of 7.58% medium-term notes. We also redeemed all $1.500 billion aggregate principal amount of 5.875% senior notes due 2026.

Management believes that cash flows from operations, amounts available under our senior unsecured credit facility and our anticipated access to public and private debt markets will be sufficient to meet expected liquidity needs for the foreseeable future.

All of the senior notes issued by HCA Inc. in 2014 or later are fully and unconditionally guaranteed on an unsecured basis by HCA Healthcare, Inc. The combined assets, liabilities, and results of operations of HCA Healthcare, Inc. and HCA Inc. are not materially different than the corresponding amounts presented in the consolidated financial statements of HCA Healthcare, Inc. As a result, summarized financial information of HCA Healthcare, Inc. and HCA Inc. is not required to be presented under Rule 13-01 of Regulation S-X.

Market Risk

We are exposed to market risk related to changes in market values of securities. Our insurance subsidiaries held $588 million of investment securities at December 31, 2025. These investments are carried at fair value, with changes in unrealized gains and losses that are not credit-related being recorded as adjustments to other comprehensive income. At December 31, 2025, we had net unrealized losses of $14 million on the insurance subsidiaries’ investment securities.

HCA HEALTHCARE, INC.

MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION

AND RESULTS OF OPERATIONS (Continued)

Market Risk (continued)

We are exposed to market risk related to market illiquidity. Investments in debt and equity securities of our insurance subsidiaries could be impaired by the inability to access the capital markets. Should the insurance subsidiaries require significant amounts of cash in excess of normal cash requirements to pay claims and other expenses on short notice, we may have difficulty selling these investments in a timely manner or be forced to sell them at a price less than what we might otherwise have been able to in a normal market environment. We may be required to recognize credit-related impairments on our investment securities in future periods should issuers default on interest payments or should the fair market valuations of the securities deteriorate due to ratings downgrades or other issue-specific factors.

We are also exposed to market risk related to changes in interest rates. Debt of $2.507 billion at December 31, 2025 was subject to variable rates of interest, while the remaining debt balance of $43.985 billion at December 31, 2025 was subject to fixed rates of interest. Both the general level of interest rates and, for the senior unsecured credit facility, our leverage affect our variable interest rates. Our variable debt is comprised of outstanding commercial paper notes and the floating rate senior notes due 2028. The average effective interest rate for our long-term debt was 5.0% for both 2025 and 2024.

The estimated fair value of our total long-term debt was $45.911 billion at December 31, 2025. The estimates of fair value are based upon the quoted market prices for the same or similar issues of long-term debt with the same maturities. Based on a hypothetical 1% increase in interest rates, the potential annualized reduction to future pretax earnings would be approximately $25 million. To mitigate the impact of fluctuations in interest rates, we generally target a majority of our debt portfolio to be maintained at fixed rates.

We are exposed to currency translation risk related to our foreign operations. We currently do not consider the market risk related to foreign currency translation to be material to our consolidated financial statements or our liquidity.

Tax Examinations

During 2025, the Internal Revenue Service (“IRS”) concluded its examination of the Company ’ s 2022 and 2023 income tax returns resolving all federal income tax matters for those years. Completion of the examination had no material impact on our results of operations or financial position. At December 31, 2025 , the IRS was examining the 2019 income tax returns of certain affiliates of the Company. We are subject to examination by the IRS for tax years after 2023, as well as by state and foreign taxing authorities. Management believes HCA Healthcare, Inc., its subsidiaries and affiliates properly reported taxable income and paid taxes in accordance with applicable laws and agreements established with the IRS, state and foreign taxing authorities, and final resolution of any disputes will not have a material, adverse effect on our results of operations or financial position. Howe v er , if payments due upon final resolution of any issues exceed our recorded estimates , such resolutions could have a material , adverse effect on our results of operations or financial position .