The useful benchmarks in this industry sit scattered across a hospital finance study, a Federal Reserve household credit report, a cybersecurity survey, and a trade association’s annual member research. Nobody assembles them in one place, so buyers end up quoting a decade-old statistic from a vendor slide.
Two rules for everything below. Every number names its publishing organization. Where a figure is dated, derived, or single-sourced, we say so instead of laundering it.
Collectability by placement age
The oldest and least controversial data in receivables, and the least acted on.
The Commercial Collection Agencies of America publishes a collectability curve that the Credit Research Foundation republishes. It measures the share of a commercial receivable that remains collectable at each month past due.
| Months past due | Collectable share | Source |
|---|---|---|
| 1 | 88.7% | Commercial Collection Agencies of America, via Credit Research Foundation |
| 3 | 68.9% | same |
| 6 | 51.3% | same |
| 9 | 37.5% | same |
| 12 | 21.4% | same |
| 18 | 15.2% | same |
| 24 | 8.9% | same |
Between month 1 and month 6, a receivable gives up about 37 points of value. Between month 1 and month 12, 67 points.
Two figures put that in context. Encore Capital Group deployed $1.408 billion on portfolio purchases in FY2025 against $9.684 billion in estimated remaining collections, which is a market pricing expected recovery rather than face value. And in 2022, half of US hospitals and health systems reported more than $100 million in receivables for claims older than six months, per the American Hospital Association, which is to say half the field carries assets past the midpoint of that curve at close to book value.
Volume, liquidity, and operating conditions
TransUnion’s seventh annual Debt Collection Industry Report: Investing For Impact is the primary industry survey.
| Metric | Figure | Source |
|---|---|---|
| Collections operations reporting increased account volumes in 2025 | 64% | TransUnion, seventh annual reportrnational |
| Expecting volume increases over the next 12 months | 75% | same |
| Forecasting double-digit volume growth | 48% | same |
| Third-party agencies reporting decreased account liquidity | 34% | same |
| Agencies reporting declining collectability | 28% | same |
| Companies using or planning to deploy AI or machine learning | 93% (73% in 2024, 49% in 2023) | TransUnion, seventh annual Debt Collection Industry Report |
| Average number of systems and tools per collections operation | 6.7 | same |
That volume-and-liquidity pairing is the single most useful finding in the survey. More accounts arriving, each worth less on arrival.
The question measures use or planned deployment, which is broader than deployment in production. Attribute it that way.
Delinquency transitions by product
The Federal Reserve Bank of New York’s Quarterly Report on Household Debt and Credit for Q1 2026 is the reference series for consumer credit conditions.
| Metric | Q1 2026 | Prior year | Source |
|---|---|---|---|
| Total US household debt | $18.794 trillion | n/a | Federal Reserve Bank of New York |
| Share of outstanding debt in some stage of delinquency | 4.8% | n/a | same |
| Student loan transition into serious delinquency (90+ days) | 10.86% | 8.04% | same |
| Credit card transition into serious delinquency | 7.10% | n/a | same |
| Auto loan transition into serious delinquency | 2.97% | n/a | same |
| Mortgage transition into serious delinquency | 1.48% | 1.22% | same |
| HELOC transition into serious delinquency | 1.15% | 0.88% | same |
| Borrowers 120+ days past due moved to ED Default Resolution Group | ~2.6 million | n/a | same |
The same report puts balances by product at mortgage $13.191 trillion, auto $1.685 trillion, student loan $1.658 trillion, credit card $1.252 trillion, and HELOC $0.446 trillion.
One number cuts the other way. The Federal Reserve Board’s credit card charge-off rate was 3.84% in Q1 2026, down from 4.46% a year earlier and falling for five consecutive quarters. Rising delinquency transitions alongside falling charge-offs generally means issuers are holding and working paper longer before it leaves the balance sheet, which pushes older, harder inventory into third-party placement later.
Denials, appeals, and overturn rates
The healthcare numbers are the best-documented in recovery, because healthcare is the only vertical that agreed on definitions.
| Metric | Figure | Period | Source |
|---|---|---|---|
| Net revenue lost to final denials and bad debt | $48.4 billion, up 25% from $38.6 billion | 2025 | Kodiak Solutions, ~2,300 hospitals, published March 2026 |
| Average initial denial rate | 11.6% (from 11.4%) | 2025 | Kodiak Solutions |
| Average clinical denial rate | 2.6% (from 2.4%) | 2025 | Kodiak Solutions |
| Rate at which providers overturn initial denials | 42.1% (from 42.7%) | 2025 | Kodiak Solutions |
| Median final denial rate as share of net patient revenue | 2.7% (from 2.5%) | 2025 | Kodiak Solutions |
| Commercial payer net revenue leakage, inpatient / outpatient | 6.6% / 10.3% | 2025 | Kodiak Solutions |
| Patient responsibility as share of net patient revenue | 7.3% (from 6.8%) | 2025 | Kodiak Solutions |
| Collection rate on patient balance | 42.4% (from 45.1%) | 2025 | Kodiak Solutions |
| Total claims adjudication cost to providers | $25.7 billion, up 23% | 2023 | Premier Inc., 280 hospitals across 23 states |
| Administrative expense per claim | $57.23 (from $43.84) | 2023 | Premier Inc. |
| Share of initially denied claims eventually paid | ~70% | 2023 | Premier Inc. |
| Potentially unnecessary share of adjudication cost | ~$18 billion | 2023 | Premier Inc. |
| In-network claims denied by HealthCare.gov insurers | 19% | 2024 | KFF, published March 2026 |
| Denied marketplace claims appealed by consumers | fewer than 1% | 2024 | KFF |
| Appeals in which insurers upheld the original denial | 66% | 2024 | KFF |
| NY external appeals overturned | ~53%, from 38% in 2019 | 2025 | JAMA, ~51,000 cases, published 15 April 2026 |
| Home healthcare denials reversed on external appeal | above 78% | 2025 | JAMA |
| Denials requiring at least some human rework | 90% | 2025 | Experian Health, State of Claims 2025 |
| Providers saying clean claim submission is harder than a year ago | 68% | 2025 | Experian Health |
| Providers facing denial rates of 10% or higher | 41% | 2025 | Experian Health |
Read Kodiak and Premier together and the shape is clear. Payers deny more, providers overturn less of what they contest, and Premier puts the share of initially denied claims that eventually get paid at about 70%. Premier’s hospital population is self-selected, as is the New York external appeal population behind the JAMA reversal rates, and both point the same direction: a large volume of denied claims was payable.
Six states enacted laws in 2026 barring insurers from relying on AI as the sole basis for denying care, per Holland & Knight: Alabama, Indiana, Maryland, Utah, Georgia, and Washington, with effective dates running through 2027. California’s SB 1120 already required a licensed physician to make medical necessity determinations, effective January 2025.
Cost to collect
HFMA’s MAP Key FM-6 defines cost to collect as total revenue cycle cost divided by total patient service cash collected. The numerator includes salaries, vendor fees, outsourced services, software maintenance, IT, and legal.
| Benchmark | Figure | Source |
|---|---|---|
| HFMA best-practice cost to collect | 2% of cash collected (moved down from 3%) | HFMA MAP Keys |
| Cross-industry median cost to manage and process collections | $0.31 per $1,000 of revenue, across 3,477 companies | APQC Open Standards Benchmarking, measure 103718 |
| Annual US hospital spend on billing and collections | ~$40 billion | American Hospital Association, citing McKinsey, Sept 2024 |
| Administrative costs as share of total hospital expenses | more than 40% | American Hospital Association |
| Hospitals and health systems reporting more than $100M in receivables for claims older than 6 months | 50%, 2022 data | American Hospital Association, 2024 administrative-cost report |
| IRS private collection agency commission cap | up to 25% of commissionable payments | US GAO, GAO-24-106140 |
| IRS private collection program yield | ~$1.1 billion collected on ~$36.8 billion assigned, FY2017 to FY2021 | US GAO |
| Federal student loan collection costs chargeable to defaulted borrowers | up to 25% of balance | Center for American Progress analysis of Department of Education data |
Two honest caveats. There is no published, standardized cost-to-collect benchmark for utilities, telecom, or higher education comparable to HFMA’s. The APQC measure is the only cross-vertical denominator available, and it covers internal collections process cost rather than total recovery cost. And commonly quoted contingency-rate ranges by placement tier and vertical come from trade sources with no audited rate card behind them, so we’ve left them out. The GAO’s documented 25% federal cap is the sturdiest published anchor available.
Third-party breach share and vendor risk
| Metric | Figure | Source |
|---|---|---|
| Confirmed breaches involving a third party | 48%, up 60% year over year | Verizon, 2026 Data Breach Investigations Report |
| Same metric, prior two editions | 30% (2025 DBIR), 15% (2024 data) | Verizon |
| Top initial access vector, 2026 DBIR | vulnerability exploitation, 31% of breaches | Verizon |
| Share of individuals exposed in healthcare breaches via a business associate | 65% in 2025, up from 5% in 2015 | HIPAA Journal analysis of HHS OCR breach portal data, June 2026 |
| Share of reported healthcare breaches involving a business associate | 43% | HIPAA Journal / HHS OCR, H1 2026 |
| Business associates penalized by HHS OCR in the prior two years | at least 8 named entities | HIPAA Journal, citing HHS OCR |
| Indirect fourth-party relationships per direct third party | 60x to 90x | SecurityScorecard and Cyentia Institute, 235,000+ organizations |
| Organizations related to at least one third party breached in prior 2 years | 98.3% | SecurityScorecard and Cyentia |
| Organizations with indirect ties to 200+ breached fourth parties | ~50% | SecurityScorecard and Cyentia |
| Median third parties actively managed, TPRM programs under 3 years old | 275 | EY, 2025 Global Third-Party Risk Management Survey |
| Median third parties actively managed, programs over 10 years old | 80 | EY |
| Companies sending multiple questionnaires per assessment | 43%, averaging 55 questionnaires | EY |
| Organizations with high confidence questionnaires reflect real risk | 4% | RiskRecon, State of Third-Party Risk Management 2024 |
| Average cost of a US healthcare data breach | $7.42 million | IBM, Cost of a Data Breach Report 2025 |
| Average cost of a US data breach, all industries | $10.22 million | IBM |
| Supply chain attacks, H1 2026 | 38 attacks, 206 organizations affected, 280.6 million victim notices | Identity Theft Resource Center, H1 2026 report |
| Individuals affected by the Change Healthcare breach | 192.7 million | HHS OCR filing, reported via Healthcare IT News |
HHS Office for Civil Rights priced its proposed HIPAA Security Rule overhaul at $9 billion in first-year compliance cost across covered entities and business associates. The proposal makes every implementation specification mandatory and requires business associates to notify covered entities within 24 hours of an emergency.
Litigation, complaints, and regulatory posture
| Metric | Figure | Period | Source |
|---|---|---|---|
| FCRA federal filings | +37.4% | 2025 vs 2024 | WebRecon, via Troutman Pepper Locke |
| FDCPA federal filings | +7.8% | 2025 vs 2024 | WebRecon |
| TCPA federal filings | +0.8% | 2025 vs 2024 | WebRecon |
| CFPB complaints | +89.1% | 2025 vs 2024 | WebRecon |
| Debt collection complaints received by CFPB | ~207,800, 7% of all complaints | 2024 | CFPB, FDCPA Annual Report, Nov 2025 |
| Company response rate to routed debt collection complaints | ~97% | 2024 | CFPB |
| Federal FDCPA enforcement actions brought | none | 2024 | CFPB, FDCPA Annual Report |
| CFPB guidance documents withdrawn | 67 | by 18 Aug 2025 | GAO-26-108448 |
| CFPB enforcement actions dismissed of 34 live in Jan 2025 | 19 | by 16 Aug 2025 | GAO-26-108448 |
| State AI laws enacted | 109 across 29 states | H1 2026 | NYU Center on Technology Policy |
| FDCPA class action statutory damages cap | lesser of $500,000 or 1% of net worth | current | 15 U.S.C. § 1692k(a)(2)(B) |
| TCPA statutory damages | $500 per violation, $1,500 if willful, no aggregate cap | current | 47 U.S.C. § 227 |
| Data privacy class actions filed | 1,800+, roughly 150 per month, up 25% | 2025 | Duane Morris Class Action Review 2026 |
One trade tracker, TCPAWorld, reported 330 TCPA cases filed in April 2026 with 255 of them class actions, up 40% year over year. Single-sourced, so treat it as directional against WebRecon’s annual counts.
Structurally, the federal collections enforcer got quieter while private litigation and state law got louder, and FDCPA exposure is capped where TCPA exposure is not.
Market size and structure
| Market | Size | Forecast | Growth | Source |
|---|---|---|---|---|
| US debt collection agencies (revenue) | $15.2 billion | n/a | +3.7% in 2025 | IBISWorld |
| US collection agency businesses | 5,618 | n/a | down 1.1% year over year; about a 3% annual decline over 5 years | IBISWorld |
| Global revenue cycle management | $384.63 billion (2025) | $894.25 billion (2033) | 11.12% CAGR | Grand View Research |
| Customer experience BPO | $113.0 billion (2025) | $296.3 billion (2033) | 13.0% CAGR | Grand View Research |
| Debt collection software | $5.98 billion (2025) | $13.77 billion (2034) | 9.72% CAGR | Fortune Business Insights |
| Disclosed RCM M&A transactions | 62 deals | n/a | Jan to Oct 2025 | KPMG Corporate Finance |
| BPO and CX M&A | 23 transactions, ~$10.0 billion | n/a | TTM through Q1 2026 | Corporate Advisory Solutions |
Named RCM transactions in 2025, per KPMG Corporate Finance: Access Healthcare at $2.07 billion, CentralReach at $1.85 billion, Iodine Software at $1.25 billion, AGS Health at $1.2 billion, Elevate Patient Financial Solutions at $565 million, and Knack RCM at $500 million. R1 RCM went private in 2024 at $8.9 billion.
Growing markets, shrinking operator count, rising deal sizes. Market-research sizing figures are commercial estimates rather than audited data, and different firms produce materially different numbers for the same market, so use them for direction and not for precision.
What isn’t benchmarked, and should be
Three gaps are worth naming, because their absence shapes how the industry argues.
Nobody has published research on the performance delta between single-agency and multi-agency placement strategies in ARM. Champion-challenger competition is the standard justification for wide panels, and the liquidation difference has never been measured in public.
Nobody has studied net-back in receivables with a citable methodology. Net-back gets discussed in trade press. The closest published analogue is the federal procurement literature on lowest-price-technically-acceptable source selection, which is specific to federal IT.
And outside healthcare, no vertical has agreed on what collecting costs. HFMA’s MAP Key is the only accepted definition in the field, which is why healthcare CFOs are the only recovery buyers who can see the number they’re optimizing.
How to use this
Pick the three or four figures that describe your own book and check yourself against them. The collectability curve tells you what your placement lag is costing. Kodiak’s initial denial and overturn rates tell you whether your denial performance is drifting with the market or against it. The Verizon and HIPAA Journal numbers tell you what share of your risk now sits outside your own walls.
For the argument underneath these numbers, we’ve published three papers: The model is the commodity, The rate is the smallest number on the page, and The seam is the failure point.
Compiled by TSI, August 2026. Figures are reproduced as published by the named organizations, with publication dates given where the underlying data is older than the report. No TSI performance figure appears in this benchmark. Where sourcing is single-tracked, dated, or derived, we’ve said so in the body.
