Interest Rate / Custodial Yield Risk
Severity: HIGH • Probability: MEDIUM
~48% of revenue is custodial (spread income on HSA cash balances). Every 25bps rate cut reduces custodial revenue by ~$35-40M annually. If Fed cuts 150bps in 2026-27, total custodial revenue headwind could reach $200M+. Partially mitigated by 2-4 year fixed deposit agreements (~70% locked in) but significant floating exposure remains.
HSA Market Commoditization
Severity: HIGH • Probability: LOW-MEDIUM
Large health insurers (UHG, Cigna, Anthem) have built competing HSA platforms. Fidelity offers fee-free HSA accounts. Aggressive pricing by hyperscale competitors could pressure HQY’s per-member revenue and retention rates at large employer renewals. Scale advantages partially offset risk.
HDHP / ACA Regulatory Risk
Severity: MEDIUM • Probability: LOW
Policy shifts unfavorable to HDHPs (e.g., mandating first-dollar coverage requirements) would reduce new HSA account formation. Legislative changes requiring HSAs to cover more services pre-deductible could limit eligible account growth. HQY management monitors 20+ bills in Congress.
Technology / Cybersecurity Risk
Severity: MEDIUM • Probability: MEDIUM
HQY administers $28B+ in sensitive financial/health data. A significant data breach could impair employer trust, lead to regulatory penalties (HIPAA), and trigger large employer contract losses at renewal. Outage of the benefitWallet platform during open enrollment would be particularly damaging.
WageWorks Integration Execution
Severity: MEDIUM • Probability: LOW
Remaining technology migrations carry execution risk: customer service degradation, temporary attrition during platform transitions. Management recently disclosed ~$8M in transition costs remaining. Any service disruption during open enrollment season would be disproportionately costly.
Goodwill Impairment Risk
Severity: LOW • Probability: LOW
$3.0B in goodwill/intangibles (~79% of total assets) from the WageWorks acquisition ($4.3B in 2019). A sustained deterioration in HSA market conditions or prolonged rate compression could trigger non-cash impairment charges, which would impact reported earnings but not FCF or operations.