NRC · CIK 70487
What NRC Health (National Research Corporation) told the SEC could break it.
NRC Health's disclosures trace almost entirely back to its single end-market: substantially all of its revenue comes from U.S. healthcare customers, so a sector downturn, consolidation, or regulatory shift would hit results directly. That dependence carries a regulatory tail — legislative changes targeting Medicare/Medicaid or broader cost controls could lower providers' reimbursement and indirectly soften demand for its solutions — and, separately, it flags that some of its software development is outsourced offshore, including in Ukraine, where an expansion of the conflict could disrupt those services.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Customer concentration
- Revenue concentrated in the U.S. healthcare industrymedium
Substantially all revenue comes from customers in the healthcare industry, so a healthcare-sector downturn, consolidation, or regulatory change would directly hit results.
“Because our customers are concentrated in the healthcare industry, our revenue and operating results may be adversely affected by changes in regulations, a business downturn, or consolidation with respect to the healthcare industry. Substantially all of our revenue is derived from customers in the healthcare industry.”
SEC filing →As of 2026
Regulatory & policy
- Healthcare regulation and Medicare/Medicaid reimbursement policymedium
Customers operate under extensive state/federal healthcare regulation; legislative changes targeting Medicare/Medicaid or cost controls could lower reimbursement rates and indirectly reduce demand for NRC's solutions.
“Future legislative changes, including additional provisions to control healthcare costs, improve healthcare quality, and expand access to health insurance, could result in lower reimbursement rates and otherwise change the environment in which providers and payers operate.”
SEC filing →As of 2026
Geographic concentration
- Offshore software development outsourcing in Ukraine (conflict zone)low
The company outsources certain software development to third parties outside the U.S., including in Ukraine; expansion of the conflict there could disrupt those services.
“From time-to-time we outsource certain software development services to third parties outside of the United States, including in Ukraine. Historically, our contractors located in areas of conflict (including in Ukraine) have been able to continue their work. However, those services could be more negatively impacted in the future.”
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch