SPOK · CIK 0001289945
What Spok Holdings, Inc. told the SEC could break it.
What Spok flagged clusters on its concentration in one industry: it generates more than 75% of revenue from U.S. hospitals and other healthcare providers, so healthcare macro conditions, reimbursement cuts, and reform hit it disproportionately even though no single customer exceeds 10%. That focus also shapes its regulatory exposure — its middleware connects to medical devices and is regulated by the FDA as a medical device, on top of FCC licensing and CMS reimbursement pressures on its hospital customers. Operationally, it depends on third-party satellite networks and data centers for connectivity, leaving it exposed to outages or ransomware at those providers.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Customer concentration
- industry concentration — >75% of revenue from U.S. healthcare providershigh
Spok generates more than 75% of revenue from U.S. hospitals and healthcare provider organizations, so healthcare macro conditions, reimbursement cuts and reform disproportionately affect it (though no single customer is >10%).
“We generate more than 75% of our revenue from sales to hospitals and other healthcare provider organizations in the United States.”
SEC filing →As of 2026
Regulatory & policy
- FDA medical-device regulation of software connecting to medical devices (plus FCC, CMS)medium
Spok's middleware connects to medical devices and is regulated by the FDA as a medical device under the FDC Act; it is also subject to FCC licensing and exposed to CMS reimbursement reductions affecting its hospital customers.
“The FDA has determined software systems that connect to medical devices are subject to regulation as medical devices as defined by the federal Food, Drug and Cosmetic Act (the "FDC Act").”
SEC filing →As of 2026
Supplier concentration
- dependence on third-party satellite networks and data centersmedium
Spok relies on third-party satellite network services (a failure of which would cut service to customers) and third-party data centers for connectivity and operations, exposing it to outages and ransomware at those providers.
“we rely on third-party data centers and services for maintaining accessibility, reliability and uninterrupted connectivity”
SEC filing →As of 2026
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch