The Fine Is Only the Tip of the Iceberg

What Lies Beneath Will Cost You–Even Without a Fine 

The Incident That Made the News

On December 4, 2025, Alberto Rangel, a 51-year-old social worker, was stabbed and killed at San Francisco General Hospital’s HIV clinic, Ward 86. He came to work that day to help people. He did not go home.

Six months later, the reports from California’s Division of Occupational Safety and Health have landed, and so have the fines — a $142,700 fine against the University of California, San Francisco, after documenting multiple “serious” safety violations surrounding the incident, and a $130,500 fine against the city’s primary public hospital. The incident and the fines are already generating headlines and significant media attention. But the fines are just the tip of the iceberg.

Aside from the tragedy of losing Mr. Rangel, few people in the community that San Francisco General serves realize the fines themselves are dwarfed by the real costs of the tragedy. The hospital’s total costs have not been publicly disclosed. What we do know — from research, from litigation records, and from the experience of organizations that have been through serious workplace violence events — is that the fine is almost never the largest number on the ledger. It is simply the most visible one.

That point is no longer hypothetical in this case. Rangel’s husband, Stuart Moulder, has announced plans to sue the city for wrongful death, alleging the hospital failed to take necessary steps to protect workers after multiple reports of the alleged attacker’s violent behavior were made to hospital management. The litigation has not yet concluded. But it is already underway — and it will likely cost several times that of the Cal/OSHA fines.

Fines Are the Exception, Not the Rule — But They’re Still Just the Beginning

Not every workplace violence incident in a healthcare facility produces a regulatory consequence — but the pathway to one is shorter than many organizations assume. OSHA enforcement typically follows a complaint, a fatality, a pattern of documented violations, or a referral. The Joint Commission's scheduled accreditation surveys operate on cycles, not continuous monitoring. But a serious, visible incident changes the calculus. The Joint Commission's own sentinel event policy identifies workplace violence resulting in death or permanent loss of function as an event that requires review — meaning a fatality like the one at San Francisco General does not simply await a scheduled survey cycle. It triggers scrutiny from multiple directions simultaneously. 

When enforcement does occur, the financial stakes are real. Under OSHA’s General Duty Clause — the existing enforcement mechanism that applies regardless of whether a facility-specific rule is in place — fines for serious violations run up to $16,550 per violation. Willful or repeat violations can reach $161,323. Several states carry their own penalty structures on top of federal exposure. California’s SB 553, which took effect in July 2024, carries fines ranging from $18,000 for initial violations to over $161,000 for willful or repeat offenses — figures that apply even when the incident did not involve a weapon, did not result in a fatality, and did not make the news.

Those are meaningful numbers. They are not, however, the full story. They are the part of the story above the waterline.

The Weapon Isn’t the Point

When a healthcare worker is stabbed or shot at work, it becomes news. When a nurse is punched by a patient in an emergency department, it rarely does. When a certified nursing assistant is bitten, scratched, or struck with an object — events that happen with far greater frequency than weapon-involved incidents — the story almost never leaves the incident report, if it gets that far.

The dominant reality of workplace violence in hospitals and care settings is physical assault without weapons, verbal abuse, threats, and the sustained low-grade aggression that characterizes so many patient-facing environments. Research consistently shows that healthcare workers account for nearly three-quarters of all nonfatal occupational violence in the United States, despite comprising roughly ten percent of the overall workforce.

The regulatory exposure produced by these non-weapon incidents is the same. A Pennsylvania hospital was cited by OSHA after investigators found employees had been punched, bitten, scratched, grabbed, and struck with objects. No weapons. No fatalities. The proposed penalty was $32,158. The downstream organizational costs were considerably larger than that.

The dramatic incident is the one that makes the news. But the argument for prevention does not depend on dramatic incidents. It depends on understanding what any incident — dramatic or not — actually costs.

The Iceberg — What Sits Beneath the Fine

A regulatory fine, when it comes, represents a single data point visible above the waterline. It is the number that appears in press coverage, in board reports, and in the public OSHA citation database. What it does not represent is the organizational cost of the incident that produced it.

Along with the fine, still above the waterline, the costs are layered and compounding. Some are relatively direct and measurable. Others accumulate slowly, in ways that never appear on a single line of a financial report.

The more visible costs include:

• Legal fees associated with investigation response and potential litigation

• Workers’ compensation claims filed by injured staff

• Medical treatment costs for injured employees

• The expense of the internal investigation itself

• Remediation or infrastructure changes required to achieve regulatory abatement

These costs begin accruing immediately and are often resolved within months, though litigation can extend the timeline considerably.

The submerged costs are less visible and in many cases more expensive over time:

• Staff absenteeism driven by trauma, stress, and reduced morale

• Turnover and the cost of replacing experienced clinical staff

• Productivity loss as affected employees disengage

• Reputational damage affecting recruitment and community trust

• Insurance premium increases following documented incidents

• Accreditation survey risk and the remediation costs that follow

• Patient care disruption from understaffed and demoralized units

• Psychological harm — compassion fatigue, PTSD, and burnout — that compounds over time

Replacing a registered nurse costs an organization an estimated $82,000 on average. The turnover cascade that follows a serious or repeated violence event can produce costs that dwarf the fine many times over.

The San Francisco General case makes the iceberg visible in a way few incidents do. The $130,500 fine generated the headlines. But in the months that followed, the city of San Francisco committed $15 million annually and an additional $7.5 million in one-time infrastructure improvements for healthcare worker safety across the Department of Public Health. Those commitments also made the news — framed as a responsible investment in worker protection. That framing is accurate as far as it goes. But for a healthcare CFO, a risk manager, or a board member, those numbers belong on a different page of the same ledger. The fine was $130,500. The governmental response it compelled was more than 170 times larger. And that figure does not include the wrongful death litigation, the reputational costs, the staff departures, or the years of compounding organizational impact that will follow.

You Don’t Need a Fine to Pay the Price

Think of a regulatory fine like an expensive speeding ticket. Only a fraction of speeders ever get caught. But that does not mean the drivers who avoid the ticket escape the risks, dangers, and costs of speeding.

Healthcare organizations that have not been cited for workplace violence are not, by virtue of that fact, protected from its costs. Every incident that goes unreported represents a staff member who absorbed an experience the organization never addressed. Every nurse who quietly disengages, every technician who calls in sick on the days they cannot face the unit, every experienced clinician who decides they are done — those are the costs accumulating in the absence of a fine. They are real costs. They are just invisible ones. 

The Number We Can’t Fully Count

Any serious discussion of the financial impact of workplace violence in healthcare has to acknowledge a significant complication: the available data almost certainly understates the true scale of the problem.

Research consistently finds that between 53% and 81% of workplace violence incidents in healthcare go unreported. A 2023 University of Michigan study estimated that actual incidents may be occurring at rates up to three times higher than what official figures reflect. A 2024 survey of more than 550 nurses providing direct patient care in Texas found that 46% chose not to report their most recent violent incident to their employer. Of those, more than half said they did not report because they did not expect anything to change.

That last finding deserves particular attention. The underreporting problem is not primarily a logistical one. It is a cultural one. Staff have learned, in many environments, that reporting produces paperwork but not protection. That lesson, repeated across thousands of facilities and millions of interactions, means that the costs described in the section above are almost certainly being incurred at a scale no published estimate fully captures.

The iceberg, in other words, is larger than any available measurement suggests. The numbers at the top — the visible part of the iceberg — represent the smallest and most visible element of a problem whose true dimensions remain, in significant part, unknown.

The Regulatory Environment Is Tightening

OSHA has signaled its intention to promulgate a healthcare-specific workplace violence prevention rule — a development that would shift workplace violence from a General Duty Clause enforcement matter to a standard with explicit, auditable requirements. In the interim, the General Duty Clause remains in effect and has been actively used. Enforcement actions have followed incidents involving biting, punching, and patient aggression — not only weapon-involved events.

Federal OSHA’s penalty structure increased again in January 2025. Serious violations now carry penalties up to $16,550 per citation. Willful and repeat violations reach $165,514. Several states have moved ahead of the federal framework with their own mandatory workplace violence prevention standards — California, Washington, Oregon, Illinois, Maryland, and New Jersey among them.

The Joint Commission’s Workplace Violence Prevention Standards, in effect since 2022, require hospitals to maintain a designated program leader, a multidisciplinary prevention team, an ongoing worksite analysis, and documented training. Non-compliance findings during accreditation surveys carry their own remediation requirements, follow-up review costs, and potential public disclosure implications — costs that exist entirely apart from any OSHA action.

The enforcement infrastructure, in short, is expanding. Organizations that have not yet built the systems to demonstrate compliance — documented assessments, incident tracking, actions to address potential problems, and the auditable feedback loop that proves the work was done — are accumulating exposure with each passing day.

The Real Leadership Lesson

The strongest argument for prevention is not financial. It is human. Alberto Rangel came to work to help people. He was a social worker, in a hospital, doing exactly what the healthcare system asked him to do. His death is the reason this conversation matters.

But leaders who carry responsibility for healthcare organizations carry a parallel obligation: to understand what sits beneath the fine. The absenteeism. The turnover. The eroded trust between staff and administration. The compounding liability that builds with every unaddressed incident. The recruitment challenge that follows a serious violence event. The patient care disruption that flows from an understaffed, demoralized unit.

These costs are not hypothetical. They are documented. They are occurring right now in facilities that have never received a fine, never been cited, and never appeared in a news story. They are the price of speeding — paid in full, whether or not the camera ever flashes.

Alberto Rangel’s death and the fines made the headlines. The iceberg is what can sink the ship. And the iceberg is there whether the fine ever comes or not.

About David Kendric Brake

David Kendric Brake is CEO of OPTICS for Healthcare, an AI-native workplace violence prevention platform serving hospitals, physician practice groups, assisted living facilities, and skilled nursing organizations across the United States.

After 16 years in the book publishing industry, David became an entrepreneur with a consistent focus: building technology that helps organizations engage their target audiences, gather meaningful insights, and convert that information into actionable intelligence. That through-line runs directly into OPTICS — a platform designed not simply to produce compliance documents, but to assess organizational risk, surface gaps, generate facility-specific action plans, and give healthcare leaders and frontline staff the intelligence they need to prevent violence before it happens.

He served as consulting publisher for the CPI Workplace Violence Prevention Handbook alongside OPTICS co-founder Kim Urbanek in 2022 — the publication that sparked the creation of OPTICS for Healthcare. David and his wife Kelley, an HR consultant with a healthcare background, live in the Phoenix area — a concession to his year-round bicycling habit.

Connect with him on LinkedIn

Follow OPTICS for Healthcare on LinkedIn