ARDT · CIK 1756655
What Ardent Health, Inc. told the SEC could break it.
Ardent Health's risks are concentrated in two dimensions: where it operates and who pays it. Most of its hospitals sit in Texas and Oklahoma — 21 of its 30 acute-care hospitals, generating 59.3% of consolidated revenue in 2025 — so its results hinge on those two states' economies and rules. Like all hospital operators, it leans heavily on government reimbursement (including roughly $707.5 million of Medicaid supplemental payments in 2025) and faces cuts under the OBBBA, including a possible 4% Medicare sequestration in early 2026; and after a November 2023 cybersecurity incident that disrupted operations and exfiltrated data, it remains dependent on electronic health records and third-party systems vulnerable to future attacks.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Geographic concentration
- Hospitals concentrated in Texas and Oklahoma (59.3% of revenue)high
21 of 30 acute care hospitals (61% of licensed beds) are in Texas and Oklahoma, and those facilities generated 59.3% of consolidated revenue in 2025, making results highly sensitive to those two states' economic and regulatory conditions.
“We operated 30 acute care hospitals at December 31, 2025, and 21 of those hospitals, including one managed hospital, are located in Texas and Oklahoma and include 2,609 licensed beds, or 61% of our total licensed beds. Our Texas and Oklahoma facilities' combined net revenue represented 59.3% of our consolidated total revenue for the year ended December 31, 2025.”
SEC filing →As of 2026
Cybersecurity
- November 2023 cybersecurity incident (operational disruption, data exfiltration)medium
Ardent suffered a cybersecurity incident in November 2023 that temporarily disrupted operations and involved data exfiltration; it remains dependent on EHRs and third-party systems vulnerable to future attacks.
“In November 2023, we experienced the Cybersecurity Incident, which temporarily disrupted our operations”
SEC filing →As of 2026
Regulatory & policy
- Medicare/Medicaid reimbursement and OBBBA cuts (incl. Medicaid supplemental payments)medium
Hospital revenue depends heavily on government programs — including ~$707.5M of Medicaid supplemental payments in 2025 — and faces cuts from the OBBBA, which could trigger up to a 4% Medicare sequestration in early 2026 plus reduced ACA enrollment.
“the OBBBA increases the federal deficit such that the sequestration under the Pay-As-You-Go Act of 2010 is required, which could result in cuts to Medicare reimbursement of up to 4% in early 2026 if Congress does not take action.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
“The portfolios leased by us to Ardent and Kindred represent a substantial portion of our NNN portfolio and account for a significant portion of our NNN revenues and NOI. We depend on Ardent and Kindred to pay all property-related expenses, including maintenance, utilities, repairs, taxes, insurance and capital expenditures, and to comply with the terms of the mortgage financing, if any, affecting the properties they lease from us.”
Cited →Epic Systems Corporation
“In 2021, we completed our implementation of a single system-wide instance of Epic technology throughout all of our facilities.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch