Commitments and contingencies
Commitments
The following table summarizes the payments due by fiscal year for the Company's outstanding contractual obligations as of January 31, 2025:
Payments due by fiscal year
(in thousands)20262027202820292030ThereafterTotal
4.50% Senior Notes due 2029 (1)
$— $— $— $— $600,000 $— $600,000 
Revolving Credit Facility (1)— — — — 461,875 — 461,875 
Interest on long-term debt obligations (2)54,679 54,679 54,679 54,755 31,422 — 250,214 
Operating lease obligations (3)10,245 10,159 10,323 10,553 10,789 7,139 59,208 
Other contractual obligations (4)30,927 26,172 12,176 1,163 247 — 70,685 
Total$95,851 $91,010 $77,178 $66,471 $1,104,333 $7,139 $1,441,982 
(1)As of January 31, 2025, the outstanding combined principal of $1,061.9 million is presented net of debt issuance costs on the consolidated balance sheets. The debt issuance costs are not included in the table above.
(2)Estimated interest payments assume the stated interest rates applicable to the Notes and Revolving Credit Facility as of January 31, 2025, which were 4.50% and 5.91% per annum, respectively.
(3)The Company leases office space and data storage facilities and has other non-cancelable operating leases expiring at various dates through 2030. These amounts exclude contractual sublease income of $17.6 million, which is expected to be received through December 2030.
(4)Other contractual obligations consist of processing services agreements, software subscriptions, and other contractual commitments.
Contingencies
In the normal course of business, the Company enters into contracts and agreements that contain a variety of representations and warranties and provide for general indemnifications. The Company’s exposure under these agreements is unknown because it involves claims that may be made against the Company in the future but have not yet been made. The Company accrues a liability for such matters when it is probable that future expenditures will be made and such expenditures can be reasonably estimated.
Legal matters
In April 2021, WageWorks, Inc. ("WageWorks"), a wholly owned subsidiary of the Company, exercised its right to terminate a lease for office space in Mesa, Arizona that had not yet commenced, with aggregate lease payments of $63.1 million and a term of approximately 11 years, following the landlord's failure to fulfill its obligations under the lease agreement (the "Lease"). WageWorks' right to terminate the Lease was disputed by the landlord, Union Mesa 1, LLC (“Union Mesa”), which claimed that the Lease had commenced on December 1, 2020. On November 5, 2021, Union Mesa notified WageWorks that it was in default of the Lease for failure to pay rent, which Union Mesa claimed was due beginning in November 2021, after 11 months of abated rent. On November 24, 2021, Union Mesa
drew $2.8 million, the full amount under the letter of credit that WageWorks had posted to secure its obligations under the Lease.
On December 1, 2021, WageWorks filed a lawsuit against Union Mesa in the Maricopa County Superior Court in the State of Arizona. On January 4, 2022, WageWorks filed an amended complaint, seeking a declaratory judgment that the Lease was properly terminated and recourse against Union Mesa for breach of contract, breach of the duty of good faith and fair dealing, and conversion, including return of the funds drawn under the letter of credit. On November 27, 2024, the parties agreed to settle the lawsuit, with Union Mesa retaining the $2.8 million from the letter of credit and HealthEquity and WageWorks agreeing to pay an additional $30.0 million to Union Mesa. The $30.0 million settlement amount was recorded as merger integration expense and paid during the fiscal year ended January 31, 2025. The $2.8 million letter of credit was previously recorded as merger integration expense during the period in which it was drawn by Union Mesa.
As a result of a cybersecurity incident earlier in 2024 in which a business partner's user account containing personally identifiable information was breached, the Company is subject to multiple legal actions, including a consolidated putative class action lawsuit in federal court in the District of Utah, an individual lawsuit filed in Florida state court, and a mass arbitration action. The plaintiffs in these legal actions allege that the Company failed to implement reasonable data security practices, which resulted in a breach and disclosure of plaintiffs' and others' personally identifiable information and protected health information. The plaintiffs are seeking, among other damages, unspecified monetary damages, equitable relief, costs and attorneys' fees arising out of the incident. With respect to the consolidated putative class action lawsuit, on August 22, 2024, the court issued an order granting a motion to consolidate the class action lawsuits, on October 15, 2024, a consolidated class action amended complaint was filed, and on December 13, 2024, the Company filed a motion to dismiss the class action and a motion to compel arbitration. The Company intends to vigorously defend these legal actions. In addition, the Company is subject to several regulatory inquiries related to the cybersecurity incident. The amount of the potential loss associated with these lawsuits and any potential regulatory action cannot be reasonably estimated based on currently available information.
The Company and its subsidiaries are involved in various other litigation, governmental proceedings and claims, not described above, that arise in the normal course of business. It is not possible to determine the ultimate outcome or the duration of such litigation, governmental proceedings or claims, or the impact that such litigation, proceedings and claims will have on the Company’s financial position, results of operations, and cash flows.
As required under GAAP, the Company records a provision for contingent losses when it is both probable that a liability has been incurred and the amount of the loss can be reasonably estimated. Except with respect to the settlement of the Lease litigation, described above, no loss accrual relating to these matters was recorded because, based on currently available information, the Company does not believe that any contingent liabilities relating to these matters are probable or that the amount of any resulting loss is estimable. However, litigation is subject to inherent uncertainties and the Company’s view of these matters may change. Were an unfavorable outcome to occur, there exists the possibility of a material adverse impact on the Company’s financial position, results of operations and cash flows for the period in which the unfavorable outcome occurs, and potentially in future periods.

About Commitments Disclosures

Commitments and contingencies disclosures catalog a company's off-balance-sheet obligations and legal exposures — purchase commitments, guarantee arrangements, pending litigation, and regulatory proceedings. These items represent potential future cash outflows that may not appear as liabilities on the balance sheet until they become probable and estimable.

Key signals: litigation reserves and disclosed loss ranges quantify management's estimate of legal exposure, but unquantified "reasonably possible" losses often represent the larger risk. Watch for changes in language around pending cases — shifts from "remote" to "reasonably possible" or increases in estimated loss ranges signal deteriorating outcomes. Unconditional purchase obligations and take-or-pay contracts create fixed cost structures that reduce operational flexibility. Guarantee arrangements for subsidiaries or joint ventures can create cascading obligations. Compare the total commitment schedule against projected free cash flow to assess whether the company can meet its obligations without additional financing.