Enforcement Intelligence Briefing, week ending October 3, 2026

DOJ announced September 18, 2026 agreements with NYU Langone Hospitals and the University of Pittsburgh Medical Center resolving investigations of potential federal violations associated with gender-affirming care for minors. According to the announcement, the institutions will cease providing puberty blockers, cross-sex hormones and surgical procedures to minors. NYU agreed to pay $8.5 million and UPMC $950,000, a combined $9.45 million. These are the institutions' reported resolution commitments; the announcement does not establish that every other provider is subject to the same terms.

The release connects the investigations to potential Food, Drug, and Cosmetic Act, False Claims Act and other federal health care-law violations, including allegedly false diagnosis codes used for reimbursement. DOJ credited both institutions for cooperation, including ongoing cooperation concerning other entities. It expressly states that the resolved claims are allegations only, no liability determination was made and NYU and UPMC denied all allegations. Those distinctions matter when using the event to review billing support or service governance: a settlement is different from an adjudication of the allegations. Counsel should assess the executed terms and applicable state and federal obligations before drawing operational conclusions for a particular organization.

A September 2026 settlement agreement provides for Abbott to pay $384,999,040.12 plus interest in connection with disputed claims involving powdered infant formula and nutritional products. The government contends that, from January 2018 through December 2022, Abbott failed to comply with federal and state manufacturing obligations at its Sturgis, Michigan and Casa Grande, Arizona facilities and misrepresented compliance to WIC and Medicaid programs. The agreement is a compromise, not an admission of facts or liability. Abbott denies the allegations, and the United States does not concede that its claims lack merit. DOJ announced the resolution September 14; this tracked event date is an announcement date, not proof of the agreement’s last-signature effective date.

The payment provisions separate $348,700,868 for the United States, $35,491,288.40 for participating Medicaid states and $806,883.72 for Massachusetts's supplemental WIC appropriation, with specified interest terms. The agreement conditions relevant releases on receipt of payment and reserves categories including criminal liability, certain administrative enforcement, individual liability and conduct outside the defined covered conduct. It also addresses unallowable settlement-related costs previously claimed from federal programs. Its effective date is the date of the last signature, rather than an assumption that every payment or release occurred when one government representative signed. These terms connect manufacturing compliance representations to government-program claims while keeping the settlement's scope and unresolved rights intact.

OIG's September 2026 hospital audits reported different scales of overpayment. At Methodist, 27 of 100 reviewed claims did not fully meet billing requirements, producing $256,926 in sampled net overpayments. OIG estimated at least $12.4 million in net overpayments across selected types of services within $62 million in Medicare payments. At McLeod Regional Medical Center, 17 of 115 reviewed claims produced $38,676 in net overpayments. Both summaries identify January 2020 through December 2021 as the audit period. Methodist's estimate should therefore be distinguished from its sample error amount, and neither audit is a finding about every hospital claim.

OIG attributed the errors primarily to failures to follow policies and procedures in the selected risk areas and recommended refunds, consideration of later-period internal audits and additional training. Methodist did not concur with the refund and internal-audit recommendations but expressed willingness to provide education. McLeod agreed with most findings, did not state concurrence or nonconcurrence with the recommendations, and said it would refund agreed overpayments and described corrective steps. Those responses are not equivalent admissions. The official October 4 index dates Methodist's report September 17 and McLeod's September 16, establishing that both were available at this historical cutoff.

The September 23, 2026 RegalCare announcement, independently recorded in DOJ's retained October 4 index, concerns a $1 million settlement with RegalCare entities, Eliyahu Mirlis and Hector Caraballo. The signed agreement provides $880,000 for the United States and $120,000 for Massachusetts, plus specified interest, and includes admitted facts about Medicare and MassHealth billing. Its Medicare admissions cover April 2018 through September 2019, while its Medicaid admissions cover April 2018 through September 2023; the broader government contentions are separately stated. Some Ultra High RUG claims lacked support from individual patient need and should have been billed lower. The historical RUG model described in the agreement should not be mistaken for the current Medicare payment methodology.

The agreement identifies Caraballo as a licensed practical nurse and reimbursement executive. It states that accurate MDS modifications were permitted regardless of professional licensure, while applicable assessments required registered-nurse certification. Caraballo made changes without visibly assessing or speaking to patients; some changes occurred without clinician discussions, others after clinician discussions and/or medical-record review, and an RN signed the completed MDS afterward at his request. It also records some billing before assessments were fully finalized and describes MMQ reviews that increased MassHealth reimbursement. The lesson is not that an executive could never modify an assessment, but that patient support, certification and billing readiness must be verified. These specific admissions should remain distinct from all broader disputed government allegations.

DOJ announced on September 30 that Independence Blue Cross agreed to a $22.5 million False Claims Act settlement concerning Medicare Advantage risk-adjustment payments. The government alleged that the Pennsylvania insurer submitted inaccurate diagnosis data, failed to withdraw unsupported diagnoses and repay the resulting overpayments, and falsely certified the data as accurate. Medicare Advantage organizations receive monthly payments adjusted for beneficiaries’ expected healthcare costs. Diagnoses matter because they help determine those adjustments; the case therefore concerns payment data and later correction obligations, rather than simply whether a service occurred.

The allegations focus on payment years 2017 through 2021. According to DOJ, nurse chart reviewers identified supported conditions and IBX used those results to submit additional diagnoses, but did not delete earlier codes that the same reviews failed to substantiate. The government characterized that asymmetric use of review results as retaining payments to which the plan was not entitled. The settlement also resolves a former employee’s whistleblower lawsuit and provides a $3.825 million relator share. The release expressly states that the resolved claims remain allegations and that liability has not been determined.

On September 30, DOJ announced that Signal Diagnostics agreed to pay $20.5 million to resolve False Claims Act allegations involving the federal COVID-19 Uninsured Program. The program reimbursed eligible providers for specified testing, treatment and vaccination services for uninsured individuals. Signal provided COVID-19 tests at public and client testing sites and submitted the disputed testing and specimen-collection claims between October 2020 and March 2022. The settlement addresses alleged avoidance of repayment obligations from January 2022 through May 2023, rather than a new coverage rule or a finding that all of Signal’s testing was improper.

DOJ says an internal audit beginning around January 2022 found claims for patients who had insurance. Alleged causes included multiple profiles for the same person with conflicting coverage information and claims submitted despite alternative insurance being listed in the system. Signal allegedly continued the audit, calculated overpayments and knowingly avoided refunding the ineligible amounts. That sequence distinguishes initial eligibility errors from what happens after a provider identifies an overpayment. The $20.5 million resolution settles those allegations; the release expressly states that there has been no determination of liability.

DOJ announced on October 2 that a federal jury convicted Jonathan Decker of conspiracy to distribute controlled substances and six counts of distribution. The case concerned more than two million stimulant pills prescribed through the Done telemedicine platform. The release describes Decker prescribing methamphetamine and amphetamines without examining patients, including people whose substance-use and significant mental-health conditions were worsened by the prescribed drugs. It reports that he received more than $1 million for prescriptions. These are findings described in the account of a jury conviction, a different procedural posture from an indictment alleging unproven conduct.

The announcement places Decker’s conduct within a larger Done prosecution while distinguishing his own prescribing from the platform-wide distribution totals. It describes continued prescribing after warnings about adverse psychiatric effects, pharmacy refusals to fill prescriptions and referral bonuses for recruiting other prescribers. The account highlights the interaction of clinical assessment, warning escalation and financial incentives in a digital prescribing model. At the announcement, sentencing had not been set. DOJ states a maximum exposure of 140 years, but explains that a judge will determine the sentence using the applicable guidelines and statutory factors; that maximum is not a prison term already ordered.

On October 2, DOJ announced that Ahsan Ijaz, a Brooklyn business owner, pleaded guilty to conspiracy to commit healthcare fraud involving approximately $65 million in New York State Medicaid claims. The release identifies Happy Family Social Adult Day Care Center, Family Social Adult Day Care Center and Responsible Care Staffing, a home-health fiscal intermediary, as businesses he owned. The admitted scheme involved claims for social adult day-care and home-care services that were not provided. The guilty plea establishes the reported criminal resolution at this point; it does not establish a sentence or final financial recovery.

According to the announcement, over approximately seven years the businesses paid cash kickbacks and bribes to induce Medicaid beneficiaries to enroll, then billed for services that had not occurred. Some claims concerned beneficiaries who were outside the United States on the claimed service dates. DOJ identifies Ijaz as the tenth defendant to plead guilty in the scheme, connecting the enrollment arrangements with the underlying attendance and service records. The release schedules sentencing for March 10, 2027 and states a maximum penalty of ten years. It also explains that the judge will determine the actual sentence after considering the guidelines and other statutory factors.

DOJ announced September 4, 2026 sentences of 33 months for Kenneth Charles Kessler III and 24 months for Michael Andrew Gomez. Both had pleaded guilty in May to conspiracy to commit health care fraud. They owned and operated seven Florida durable medical equipment companies that billed Medicare for medically unnecessary orthotic braces, including braces beneficiaries neither needed nor requested. The $34.8 million figure describes the fraudulent billing scheme, rather than a statement that either individual received that amount personally.

According to the court-document account in the announcement, the operators paid kickbacks and bribes for fraudulent signed physician orders and used those orders to ship braces nationwide. They shifted billing among their companies to evade Medicare payment suspensions. DOJ reported that Kessler profited more than $1.4 million and Gomez more than $2.3 million. The related-company structure and order-generation process are distinct elements of the admitted scheme: checking only a supplier's current billing identity would not address the mechanism DOJ described. These are facts of the resolved criminal case, not a new rule changing DME coverage requirements.

DOJ's September 2026 announcement describes a False Claims Act complaint against former Capstone Diagnostics executives and associated entities involving approximately $13.7 million in Medicare payments from 2019 through 2021. The government alleges two schemes: genetic testing at church-sponsored health fairs and religious conferences without physician requests, and medically unnecessary respiratory panels added to COVID-19 testing for senior-living communities. DOJ intervened September 4 in the whistleblower case brought by a former laboratory manager. The civil allegations remain unproven; the announcement does not report a judgment against these defendants.

The alleged order-generation methods included using physicians' identities and copied signatures without permission, community-wide or chain-wide standing orders, standardized diagnosis codes, sales personnel entering orders and remuneration tied to test volume. DOJ separately identified settlements with Capstone and its owner and with its billing company; those resolutions do not adjudicate the pending defendants' liability. The release also states that criminal charges against one former executive were pending. An operational review should therefore focus on the identified control patterns without treating either the civil complaint or indictment as a conviction: individualized clinical authorization, valid signatures, medical necessity and separation of sales activity from ordering.

DOJ announced September 17, 2026 that Remedi SeniorCare Holding Corporation agreed to pay more than $5.3 million to resolve False Claims Act allegations involving drugs dispensed without valid prescriptions. The government alleged false Medicare and Medicaid claims from January 1, 2015 through March 31, 2021 for drugs supplied to assisted-living residents in various states. The release says the settlement reflects Remedi's ability to pay and will be paid over time. It does not establish that the full amount had already been collected by October 4.

The resolution includes claims raised by two former employees under the False Claims Act's whistleblower provisions, with a share of payments to be paid to them over time. The announcement expressly says the settled claims are allegations only and there has been no determination of liability. The case therefore supports a focused review of prescription-validity and billing safeguards rather than a conclusion that every resident's prescription was invalid or that the company was convicted. Facilities and pharmacy partners should distinguish the resident's need for continued medication from the separate requirement to retain a valid, timely prescribing basis for dispensing and reimbursement.

DOJ announced September 21, 2026 that Crown Medical Solutions LLC and owners Michelle and Philanzo King agreed to pay $825,000 to resolve False Claims Act allegations. Crown supplied durable medical equipment, including knee and back braces and heel stabilizers. The government alleged that, from November 2017 through April 2019, the company and owners billed Medicare for equipment that was not medically necessary and/or properly prescribed. The release expressly says the claims are allegations only and there was no determination of liability.

The settlement amount reflects the defendants' ability to pay, so it should not be equated with a judicial calculation of all alleged loss. The resolution includes a whistleblower action, with the relator to receive approximately $123,750. The reported conduct centers on the medical necessity and physician-prescribing basis for DME claims. It does not establish that the equipment was never delivered, that every Crown claim was invalid or that a court convicted the owners. Supplier review should therefore compare each claim's order and clinical support with the actual case scope, with the clinical and order evidence relevant to the DME supplied.

California's Attorney General announced September 21, 2026 that Maki Martinez-Gruninger pleaded guilty to one felony count of Medi-Cal false claims and would serve two years in state prison. The investigation identified $413,643.30 in false IHSS and respite-care claims. The case involved a disabled family member whose actual caregiver reported discovering the scheme. This is a criminal resolution, rather than an unresolved civil allegation or an administrative audit.

According to the release, the complainant discovered in December 2019 that Martinez-Gruninger had secretly applied in November 2007 to act as the family member's IHSS provider. The resulting false claims continued for more than a decade. The Attorney General reports that investigators found intentional taking of Medi-Cal funds and presentation of false claims. Those details point to service-provider identity, enrollment and verification of who actually delivered care. Family relationships should not substitute for independent confirmation of provider status and delivered services.

The complete CDPH export captured October 4 lists 14 citations issued September 21–25 across 13 facilities; Intercommunity Care Center has two. All 14 rows show Open dispositions. The largest listed amounts are a $60,000 Class A patient-care citation at Intercommunity and a $75,000 trebled Class A patient-care citation at Sunnyside Nursing Center, increased from an initial $25,000. Coral Cove Post Acute has a $3,500 Willful Material Falsification citation. These are assessed amounts and classifications in the administrative export, not evidence of completed payment or a final appeal outcome.

The six Abuse/Facility Not Self Reported rows concern Lindsay Gardens, Solaria Care–Auburn, Southland, Capital Post Acute, Intercommunity and Sharon Care Center. The export includes skilled nursing facilities, a pediatric day health and respite facility, and an intermediate care facility for people with developmental disabilities; it should not be treated as 14 nursing-home cases. Violation dates predate the penalty issue dates. The categories and cited provisions identify areas for review, but the export does not provide full factual narratives, resident outcomes or corrective-action details. Those require the individual citation documents.

Missouri's Attorney General announced October 1, 2026 that Melissa Bates used her phone to clock her daughter Dajah Sanders into and out of Medicaid-funded personal-care work while Sanders was incarcerated. The release describes seven false claims during the September 10-20, 2022 incarceration, associated with asserted service on eight days averaging about four hours. Missouri Medicaid's reported loss was $533.01.

For Bates, the announcement reports a suspended imposition of sentence and five years of unsupervised probation. It lists $266.50 restitution, $533.01 double damages and a $2,500 civil penalty, totaling $3,299.51, and says the state will hold each defendant responsible for half of restitution. Investigators' bank analysis indicated check-splitting between recipient and personal-care attendant. Sanders's separate earlier disposition is not Bates's sentence. The case illustrates why an electronic clock entry alone does not establish worker availability or actual service; identity, availability and payment evidence must be considered together.

DOJ announced October 1, 2026 guilty pleas by Hassan Ahmed Hussein and Ahmed Abdirashid Mohamed in a Minnesota Medicaid Housing Stabilization Services case. Hussein pleaded guilty September 24 and Mohamed October 1, each to one wire-fraud count. The announcement describes more than $500,000 in fraudulent claims for services never provided. Sentences had not been imposed in the release; the stated 20-year maximum is possible exposure rather than an actual sentence.

According to the court-document account, the men enrolled Pristine Health LLC to help people with disabilities find and maintain housing, then submitted claims for unprovided services and inflated claims for greater reimbursement. Approximately 90 beneficiaries were enrolled, including some who had not agreed to services. DOJ reports more than $820,000 in total billing, a different figure from the release's fraud amount. Those distinctions matter when evaluating program claims: beneficiary enrollment, consent to services, actual delivery and amounts billed are separate evidence questions. The case supports targeted control review without assuming every service in the wider program was fraudulent.

DOJ's September 30, 2026 announcement reports a September 17 indictment of Nouman Mustafa and Mohsin Khan on health care-fraud and aggravated-identity-theft counts. Khan was arrested September 29; Mustafa had been arrested on a criminal complaint in February. The differing dates should not be merged into one arrest event. The charges allege millions of dollars in fraudulent DME claims and remain accusations, with both defendants presumed innocent unless proved guilty.

The court-record account alleges that, from January 2025 through January 2026, the defendants created companies that appeared to be DME suppliers but lacked physical locations for legitimate business. They allegedly submitted more than $3.5 million in claims, moved to another company when denials arose and used real beneficiary and physician information obtained through contacts in Pakistan and elsewhere. The announcement describes retaining approximately 30 percent of proceeds and sending the rest to contacts. Those are allegations about supplier identities and claim generation, not findings that any particular beneficiary or physician knowingly participated. Supplier ownership and identity checks should therefore be coupled with order and delivery verification.

DOJ announced September 29, 2026 a False Claims Act lawsuit alleging that Bay City physician Michael Neret fraudulently billed Medicare nearly $500,000 for surgical neurostimulator electrode implantations. Neret owns and manages Neret MD Medical Clinic. The complaint is a pending civil matter; the release expressly states that its claims are allegations and liability has not been determined. It should be classified as a civil complaint rather than a judgment.

The alleged mismatch concerns procedures billed as complex surgery requiring an operating room versus brief in-office sessions using inexpensive electro-acupuncture devices. According to the complaint, nonphysician practitioners and nonclinical staff inserted small wires into the skin and secured devices behind patients' ears. DOJ also alleges Neret knew the devices were not billable and used the procedures to justify narcotic prescribing. These details support comparison of codes, actual devices, setting, personnel and clinical documentation. They do not establish that the physician has been convicted or that every neurostimulator procedure is improper.

Georgia's Attorney General announced September 29, 2026 an indictment of Latisha Blake-Ulmer on three counts of neglect of a disabled adult. The grand jury returned the indictment September 23. The announcement concerns care of disabled adults in a Savannah group home, so the publication date and indictment date describe different steps in the same pending case. The charges remain allegations, and the defendant is presumed innocent.

The indictment alleges that residents were locked outside without adequate clothing or weather protection on multiple occasions. It also alleges that one resident's severe bruising and fractured collarbone went unaddressed for several days while in the caregiver's custody. The Medicaid Fraud and Patient Protection Division investigated after a complaint from Georgia's behavioral-health and developmental-disabilities department. The announcement does not report a conviction or a finding that all group-home care was deficient. Its specific allegations make resident observation, injury assessment, protection from environmental exposure and complaint escalation relevant control areas.

New York's Attorney General announced September 28, 2026 the arrest of dentist Suleman Nasimi and arraignment of Nasimi and Tooth Fresh Meadows on separate 40-count felony complaints. The allegations concern more than $300,000 in Medicaid claims for unperformed dental procedures affecting at least 35 recipients from January 2020 through August 2024. Both the procedural posture and the presumption of innocence matter: the announcement reports charges, not a conviction or a final recovery.

Investigators allege that Nasimi billed for root canals and crowns that did not occur, including more than $140,000 in claimed procedures during July 2022 periods when his office was closed and he was in Europe. The release describes an additional patient-access effect: prior claims allegedly caused Medicaid records to show procedures as completed, preventing some patients from obtaining approval for needed care elsewhere. Claim review therefore involves both whether the dentist was available and whether the patient actually received the procedure. Corrections to payment records may also affect access to subsequent treatment; a billing discrepancy is not merely a financial issue.

The FTC and Utah and Nevada Attorneys General sued Lens.com, owner Cary Samourkachian and Speed Commerce LLC over alleged deceptive contact-lens pricing. The actual October 4 FTC index dates the announcement October 2. The complaint alleges low advertised prices followed by substantial mandatory 'Taxes & fees' charges, sometimes doubling advertised prices. These are pending allegations, not a judgment.

The alleged practices include placing charges below the visible checkout screen, misleading tax labels and using low prices to induce AutoRefill enrollment. The complaint also challenges disclosure of recurring charges, cancellation instructions and cancellation deadlines. It was filed in federal court in Nevada. The FTC expressly says the court will decide the case, so the announcement should not be read as a finding that liability or damages have been established.

DMHC executed a combined letter of agreement with Medi-Excel, S.A. de C.V., on September 27, 2026, covering matters 20-450 and 24-456. The agreement carries one $50,000 administrative penalty and a corrective action plan. Its two document listings reproduce the combined agreement; they do not establish two separate $50,000 penalties. Follow-up reports found two deficiencies uncorrected after the 2018 survey and three after the 2021 survey. The plan acknowledged noncompliance, while the agreement limits use as an admission in civil or criminal proceedings and allows DMHC to consider the violations in future proceedings involving the plan.

The findings include inadequate assistance for enrollees with visual or other communicative impairments, UM monitoring described in policies without sufficient implementation evidence, and required grievance-language defects in sampled letters. Of eight emergency-denial files reviewed, five were excluded as misclassified and two of the remaining three used an incorrect payment standard. The corrective plan required a certified statement addressing all deficiencies, a grievance-acknowledgment template and an emergency-services payment policy by September 30. As of October 4 that deadline had passed; the agreement alone does not prove delivery or DMHC acceptance of those materials.

DMHC's agreement with Adventist Health Plan, Inc., executed September 27, 2026, imposes a $40,000 administrative penalty in matter 23-800 for failure to correct survey deficiencies. Adventist is a restricted plan that does not directly enroll members; it contracts with full-service plans and supports their Medi-Cal enrollees. A follow-up report dated October 4, 2021 found none of five deficiencies from the routine survey cured. The agreement records the plan's acknowledgment of noncompliance, but restricts its use as an admission in civil or criminal proceedings while allowing DMHC to consider the violations in future proceedings involving the plan.

The follow-up findings describe hundreds of pages of generic MedPOINT quality and UM policies that were not adapted to the restricted plan's actual responsibilities, leaving board oversight unclear. The plan did not respond to 58% of provider UM requests in the cited review despite denying or modifying the requests. In a separate 61-file sample, 44 files lacked adequate explanation, criteria or clinical reasoning, including 34 files entirely without enrollee letters. Nine of 61 decisions were untimely, comprising six concurrent and three preservice determinations. Delegating the work did not remove the plan's responsibility to monitor the delegate and ensure required decisions and notices.

DMHC executed a September 27, 2026 agreement with the commission operating Central California Alliance for Health in matter 26-145, addressing the quarterly grievance report for the quarter ending December 31, 2025. The report was due January 30, 2026 and was filed March 26, 55 days late. DMHC emailed the plan on March 5 about the overdue report; the plan did not respond until the filing date. The agreement records acknowledged noncompliance and a $2,750 administrative penalty, with limitations on admission use in civil or criminal proceedings.

The letter describes quarterly reporting on grievances pending and unresolved for 30 days or more, with filing no later than 30 days after each quarter. Its corrective plan required the plan to address the root cause of both the filing delay and its delayed response to DMHC, and to document steps for timely future filings. Both deliverables are expressly recorded as completed on August 19, before the agreement was executed. The record therefore distinguishes the original missed reporting deadline, completed corrective work and the later enforcement agreement; it does not establish that the penalty had been paid.

CDPH's complete October 4 export contains citation 020023853, issued September 28, 2026 to Bay View Rehabilitation Hospital, LLC, a skilled nursing facility in Alameda County. The record identifies a Class A Patient Rights citation under Title 22 section 72315(b), with $3,500 as both the initial and final amount due and a $3,500 balance. Its disposition is Open. The penalty issue date identifies the new enforcement record; the violation dates are May 24, 2026 and should not be substituted for the September announcement window.

The export lists no associated complaint and provides an administrative category and cited provision, but not the underlying factual statement. It does not identify a particular resident outcome, explain how the cited violation occurred or establish what corrective work followed. The field labelled final amount is part of the export and does not override the separate Open disposition or prove the appeal process complete. Reviewers need the full citation and any appeal or corrective-action records to determine the case-specific facts and subsequent administrative result.

AHRQ published an October 2, 2026 notice that Hospital Rep Safety Solutions Corp., PSO P0264, had been delisted for cause after failing to correct a deficiency. The delisting took effect at midnight Eastern Time on September 9. Publication and effectiveness therefore occurred on different dates, and the notice reports an action already effective by October 4. It identifies a failure to correct a listing deficiency without supplying clinical incident details or establishing a Medicare provider exclusion.

The notice explains that the Patient Safety Act and implementing rule provide a framework for reporting patient safety work product to listed PSOs for aggregation and analysis under applicable privilege and confidentiality protections. Delisting can also occur through voluntary relinquishment or expiration, but AHRQ identifies this event specifically as for cause. Organizations should therefore verify the exact PSO identity and effective date in their arrangements and obtain legal advice on reporting and protections. The notice alone does not establish that every historical communication loses protection or authorize disclosure of patient safety information.

OIG's audit of UnitedHealthcare Benefits of Texas, Inc., contract H0609, was issued September 23 and posted September 28, 2026. It examined selected high-risk diagnoses submitted for Medicare Advantage risk adjustment. Medical records did not support diagnoses in 172 of 230 sampled enrollee-years, producing $622,927 in sampled overpayments. From those sample results, OIG estimated at least $24.4 million in overpayments for 2020 and 2021. The estimate is distinct from the sample amount and does not establish that every UnitedHealthcare diagnosis was unsupported.

OIG recommended a $24.4 million refund among four recommendations and said policies and procedures to prevent, detect and correct noncompliance could improve. United disagreed with some findings and requested withdrawal of all recommendations. These are audit findings and recommendations, not a court judgment or negotiated settlement, and the release does not prove that the estimated amount was repaid. A plan's operational review should connect submitted diagnoses to actual medical-record support, evaluate the selected risk areas and assess any resulting refund question under applicable law rather than treating an audit estimate as an adjudicated debt.

OIG's September 23, 2026 audit, posted September 28, reviewed kidney-transportation cost reporting and organ transport at 43 selected independent organ procurement organizations. Twenty-one OPOs reported $188,147 in improperly allocated or inadequately supported transportation costs, and 26 reported another $240,178 in costs that failed Medicare requirements. The combined unallowable amount was $428,325. The groups should not be added to infer 47 distinct organizations; the report reviewed 43 selected OPOs and describes separate findings.

OIG also identified four OPOs that did not meet Medicare requirements for organ preparation and transport. It recommended that CMS instruct the Medicare administrative contractor to recover the unallowable costs through adjustments to applicable cost reports and provide additional education. CMS concurred with both recommendations. That concurrence is not proof that every adjustment or collection had occurred by October 4, nor is the audit a court judgment. The findings connect accounting support and allocation with physical transport practices, which require separate evidence and control owners.

OIG issued its South Carolina collections audit September 30, 2026 and posted it October 2. The audit found that South Carolina did not accurately calculate and report approximately $108.6 million in federal-share Medicaid and CHIP collections subject to the increased COVID-19 federal medical assistance percentage. This is a reconciliation and federal-share reporting finding, rather than a finding that every underlying provider claim was fraudulent. The amount describes the audit's calculated underreporting, not a court-imposed settlement.

Among four recommendations, OIG called for adjusting future CMS reports and refunding the federal share of the underreported collections, including $8.6 million associated with the first quarter affected by the enhanced FMAP. It also recommended written procedures that reconcile reports to accounting records and address unexpected or retroactive FMAP changes. South Carolina concurred with three recommendations and described completed or planned steps. The summary therefore should not be characterized as disagreement with every recommendation or as proof that the entire refund had already been completed. Finance and program reporting teams need to reconcile the collection period, applicable federal share and supporting ledger together.

OIG's Wisconsin school-based Medicaid audit was issued September 30 and posted October 2, 2026. Reviewing $505.5 million in services over four years, OIG estimated $454.9 million may have been improperly claimed. It separated at least $67 million associated with unsupported random-moment time-study coding and unlicensed providers from an additional $387.9 million tied to unsupported allocation ratios. The latter was not framed as an unconditional finding that the entire amount must be repaid regardless of further support.

OIG recommended refunding the $67 million estimate and either refunding the $387.9 million or supplying documentation reasonably supporting the ratios. It also noted possible additional unallowable costs because sampling omitted moments at the beginning of the school year and made procedural recommendations. Wisconsin generally disagreed with the findings, disputed some recommendations and described improvements, with different responses to the individual findings. This is an audit with disputed conclusions and documentation questions, not a settlement or court judgment. Review should preserve the distinction between time-study coding, provider qualifications, allocation support and the sampling frame.

North Carolina's Attorney General announced October 1, 2026 a $98,474 settlement with White Oak Manor of Burlington concerning allegations that it hired an unqualified person as a nurse and billed Medicaid for her services. The amount includes $49,237 in Medicaid restitution. The release says the facility will pay; it does not establish that payment had already been completed by October 4. It also expressly states that the civil claims are allegations and there has been no judicial determination or admission of liability.

The primary release identifies Nieasha Jones as working 54 shifts over three months without a nursing license, training or experience, interacting with residents and providing care. North Carolina's health-service regulation division referred the case to the Attorney General's Medicaid investigators. The reported problem is therefore both a personnel qualification and a reimbursement-support issue. An operational review should connect direct license verification to actual shifts, role assignments and claims, while retaining the distinction between the state's allegations and a proven adjudicated finding. Federal participation in Medicaid funding does not by itself make this announced state resolution a federal prosecution.

DOJ announced October 2, 2026 sentences for four participants in a controlled-substance conspiracy involving Annandale physician Rotimi Iluyomade. Yared Michael Tesfaye received 60 months, Elhadj Malick Diallo time served of approximately 13 months, Cameron Isaiah Lewis eight months and Raymono Alfonzo Russell II ten months. All four had previously pleaded guilty. These are imposed sentences reported for the named defendants, rather than statutory maximums or sentences for different people with similar names.

The court-document account describes lists of purported patients, variations of names and false addresses, prescriptions sent to pharmacies across multiple states and payment of $300 per fraudulent prescription by Lewis and Diallo. Tesfaye also sold access to appointment 'slots,' and other participants collected and distributed the drugs. An investigation began after Russell tried to collect a fraudulent prescription and authorities found bottles bearing multiple patient names from the same prescriber. The mechanism connects prescribing, patient identities, payment and pickup patterns. It should not be reduced to the presence of cash alone or used to assume that every telehealth or out-of-state prescription is illegitimate.

DOJ announced October 2, 2026 that Tekiyah McLeod pleaded guilty to health care fraud and aggravated identity theft. As registered agent for nLove Community Services LLC, she admitted billing approximately $477,872 for mental-health therapy that never occurred, including purported services to herself. Medicaid paid approximately $453,323. The billed amount and the amount received are different measures and should not be interchanged.

McLeod also admitted using a nurse practitioner's name and National Provider Identifier without that practitioner's knowledge or consent. The court accepted the plea and scheduled sentencing December 16; she remained on bond in the announcement. The release's maximum health care-fraud term and mandatory consecutive identity-theft provision describe sentencing exposure, not a sentence already imposed. The case connects encounter verification with authority to use rendering-provider identifiers: a valid NPI in a claim does not establish that the named practitioner provided, authorized or even knew about the service.

DOJ's October 2, 2026 release reports that Jerry Jones III was sentenced October 1 to 27 months in prison after a June 29 guilty plea to a controlled-substance conspiracy. The offense involved prescribing outside professional practice and without legitimate medical purpose from 2021 through 2025. The release describes a home-based practice purportedly providing addiction treatment by telehealth. The October 1 sentence, rather than the following day's announcement, is the finding's retained event date.

According to the court-record account, Jones prescribed buprenorphine, benzodiazepines and stimulants for cash without demonstrated medical necessity, charged more for higher doses or more prescriptions and received $294,850.72 through CashApp and Venmo. The sentencing judge discussed his long prior lawful practice and voluntary license surrender, while emphasizing punishment and deterrence. Those details concern the documented unlawful operation; telehealth, cash payment or addiction treatment alone is not the offense. Clinical purpose, dose decisions, payment incentives and awareness of diversion must be assessed together.

DOJ announced September 29, 2026 that a federal grand jury charged Swapnadip Roy and Vicky Ramancha with conspiracy, smuggling and counterfeit-drug offenses concerning an alleged transnational Ozempic scheme. Roy was extradited from Italy and made an initial appearance in Tampa that day. The indictment alleges sales to U.S. distributors at deeply discounted prices. The announcement describes pending charges and extradition, not a conviction; both defendants remain presumed innocent. The stated maximum possible sentence is not an imposed sentence.

According to the charging documents described by DOJ, the scheme ran from at least July 2023 through April 2024 and obtained counterfeit Ozempic from unauthorized sources in China. Allegedly counterfeit packaging, inserts, pen labels and needles were intended to make downstream purchasers believe the products were manufacturer-authorized. DOJ says the scheme continued after FDA seized products and issued a warning in December 2023. These allegations connect supplier verification to physical packaging and lot evidence: professional-looking materials or a low price cannot by themselves authenticate an injectable. The release does not establish the composition of every product or an adjudicated patient outcome.

Joseph Toews, a Manhattan Beach family therapist, was sentenced September 29, 2026 to 200 months in federal prison following his June guilty plea to production of child sexual abuse material. The court also imposed a $50,000 fine, a $55,000 special assessment and 25 years of supervised release after imprisonment. DOJ reports that the recording device was in a publicly available women's bathroom in the building where he provided therapy. The record describes a criminal sentencing, rather than an OCR HIPAA settlement or a newly announced data-security rule.

According to the court documents described in the release, Toews installed the hidden device in a bathroom stall in January 2023 and captured at least 11 separate videos of minor victims, some of whom were his therapy patients. His plea agreement also admitted receiving child sexual abuse material during January 2023–December 2025. The clinical setting matters because physical privacy and safeguarding controls extend beyond electronic health records. Restricted access to patient-sensitive spaces, inspection for unauthorized devices and prompt escalation of concerns are practical responses to the documented mechanism, without implying that this release prescribes a specific inspection schedule.

James Vincent Campbell pleaded guilty September 29, 2026 in Maryland to one count of theft from an ERISA benefit plan, DOJ announced. He founded and led Axim Fringe Solutions Group LLC, which processed health-premium and retirement contributions for federal contractors' employees. The release describes more than $8.8 million converted through the scheme. Sentencing remained for the court to determine as of this October 4 edition; the cited five-year maximum is a possible statutory penalty, not an imposed sentence or proof of recovery.

Clients sent Axim money to forward to insurers and 401(k) accounts, but Campbell pooled funds in a master trust account. DOJ describes 135 unauthorized withdrawals totaling $2,486,905 beyond legitimate fees during 2015–2024, plus covert charges up to five times the fees owed after the business moved to Arizona. The withdrawals are part of the overall more-than-$8.8 million amount, not an additional loss to add on top. Payments for personal expenses and excessive fees illustrate why an employer's remittance to an intermediary does not prove the intended insurer or retirement account received the funds.

The U.S. Attorney's Office announced that Loretta Pyeatt pleaded guilty on September 4, 2026 to fraud in connection with access devices after stealing at least $321,000 from a care client. The release describes employment from roughly July 2023 through September 2025 and a client who received Social Security retirement and Veterans Affairs benefits. Sentencing was scheduled for December 9. That date was still future at this issue's October 4 cutoff, so the reported development is the guilty plea, not an imposed prison term.

The client gave Pyeatt debit cards to buy groceries, but she admitted using the access for cash withdrawals and other unauthorized purchases. Transactions increased from approximately 20 to 30 a month before her involvement to as many as 330 a month. The account had at least $232,026 when she began and less than $5,600 by July 2025. These details show how limited purchasing permission became repeated access to a vulnerable person's funds and incoming benefits. The release's maximum statutory penalty describes possible sentencing exposure only; it does not determine the sentence or establish that every transaction was independently adjudicated.

DEA's St. Michael's Pharmacy decision was signed September 25 and published October 2, 2026, with a November 2 effective date. It revokes the pharmacy's DEA registration following default proceedings and findings concerning state authority and controlled-substance practices. The decision separately recounts a September 2025 immediate suspension and Texas's March 2026 pharmacy-license revocation. The later effective date of the final order should therefore not be read as evidence that dispensing remained authorized until November.

The order describes unresolved diversion indicators, including repeated prescribing patterns, high strengths or quantities, multiple prescribers for similar drugs and shared patient addresses. It also addresses unaccounted-for controlled substances and recordkeeping failures. DEA found that the pharmacy defaulted after notice and did not respond to the later state-authority allegation. These are findings in an administrative registration proceeding, not a newly reported criminal conviction. Counterparty review needs to distinguish professional or pharmacy licensure, DEA registration, immediate suspension and the final order's effective date, while examining actual documentation of red-flag resolution and inventory reconciliation.

DEA's By Grace Inc. Counseling Services decision was signed September 25 and published October 2, 2026, with a November 2 effective date. The Baltimore narcotic treatment program faced allegations of ineffective diversion controls and recordkeeping violations that prevented an accurate controlled-substance inventory. Following an administrative hearing, DEA adopted the administrative law judge's recordkeeping conclusions and recommended revocation. This is a final administrative registration decision, rather than a court judgment or an assertion that the order had already taken effect by October 4.

DEA also addressed a material-falsification issue involving an application answer about corporate officers' controlled-substance convictions and the owner's prior Maryland conviction. The agency disagreed with the administrative law judge's legal conclusion on its authority over that issue and found the allegation supported by substantial evidence. The decision thus involves both operational records and truthful application disclosures. A compliance response should evaluate inventory and dispensing records alongside corporate-history answers, rather than treating revocation as based solely on a professional-license lapse. The particular findings and future effective date should remain tied to this named program.

DEA's Angela Turner-Brown decision was published September 29, 2026, after signature September 15, and takes effect October 29. The agency found that she lacked Indiana authority to handle controlled substances and ordered revocation. It reports expiration of her Indiana controlled-substance prescriptive authority in October 2023 and APRN prescriptive authority in October 2025. The registration order's future effective date does not negate the separate state-authority findings.

The decision finds default because no hearing was requested after adequate service, treating the show-cause allegations as admitted under DEA's procedures. It also notes that the DEA registration expired in July 2026 and explains why expiration did not prevent adjudication to finality. The agency's stated basis is loss of state authority, not a new criminal drug-distribution conviction. Organizations should evaluate the particular type of authority required for the role and location and check state and federal records independently; possession of one credential or an old registration number does not establish all required authority.

DEA's JT Medical, LLC decision was signed September 8 and published September 29, 2026, with an October 29 effective date. It denies an application to become a bulk manufacturer of specified Schedule I substances involving marijuana. The order concerns an application, rather than revocation of an already-authorized manufacturing registration. The agency found default after service and failure to request a hearing or otherwise meet the procedural response requirements.

The admitted allegations included inability to provide a bona fide supply agreement and lack of a substantially secured cabinet for marijuana storage. DEA treated those deficiencies and the absence of other supporting evidence after default as inconsistent with the public-interest showing required of the applicant. The decision illustrates the need to establish the specific supply and security prerequisites for the registration sought; it does not itself announce a general change to all cannabis activity or confer permission while an application is pending. Readiness evidence and the status of the actual DEA application should be reviewed separately from other business or state credentials.

DEA's Christopher Nadorff decision was signed September 21 and published September 29, 2026, and takes effect October 29. The agency found that his Ohio medical license had been suspended effective October 8, 2025 and remained suspended in the state records consulted for the order. It therefore found no state authority to handle controlled substances in the state of registration. These findings should be attributed to the order's historical record rather than treated as a newly performed current-license check.

The decision finds default after failure to request a hearing following service, with the show-cause allegations deemed admitted under DEA procedures. DEA explains that state authority is a fundamental prerequisite for maintaining practitioner registration and orders revocation and denial of specified pending applications. It is an administrative registration action, not a court judgment establishing a new criminal conviction. The future DEA effective date and the earlier state suspension address different forms of authority, so counterparty or credential review must account for both instead of assuming the later date extended state prescribing permission.

DEA's Jorge J. Figueroa decision was signed September 21 and published September 29, 2026, with an October 29 effective date. The agency found that, following a December 2017 federal guilty plea, HHS OIG mandatorily excluded him from Medicare, Medicaid and all federal health care programs beginning April 19, 2018 for at least 15 years. The decision uses that mandatory exclusion as a basis for revoking DEA registration; it is not a new 2026 criminal conviction.

After finding adequate service and no hearing request, DEA treated the allegations as admitted through default. The decision explains that mandatory, rather than permissive, exclusion is the relevant statutory basis and that the underlying conviction need not involve controlled substances. It orders revocation and denial of specified pending renewal, modification and additional-registration applications in New Jersey. Exclusion status and DEA authority are related here but remain distinct records with different purposes and dates. Screening should preserve that distinction and verify the particular entity and legal basis rather than assume every type of exclusion automatically has the same DEA consequence.

DEA's Johann Farley decision was signed September 21 and published September 29, 2026, with an October 29 effective date. The agency found a June 2024 health care-fraud guilty plea and a resulting mandatory federal health-program exclusion effective May 20, 2025 for at least 12 years. Those are the earlier grounds considered in the registration proceeding. The final DEA action is distinct from the underlying criminal case and exclusion.

Farley initially requested a hearing but did not submit a prehearing statement after two opportunities, and DEA upheld the resulting default and termination of proceedings. The decision also notes that his registration expired September 30, 2025 and explains why DEA nevertheless adjudicated the matter to finality. It orders revocation and denial of specified pending applications in Indiana. Procedural default is therefore material to the administrative outcome, and registration expiration did not erase the proceeding. Compliance review should connect exclusion, credential and case-management records without implying that the future final-order date authorized practice under an already-expired registration.

DOJ's October 1, 2026 release reports an indictment charging Kijuana Evans and Lonnie Griffin with conspiracy to commit wire fraud, wire fraud and money laundering. Evans allegedly owned TriState Guardian Services, appointed by the Oakland County Probate Court to act as a fiduciary for incapacitated adults. Griffin allegedly operated non-emergency transport company Key to Life and managed TriState. The charges concern alleged misuse of funds belonging to wards and their estates. An indictment is not evidence of guilt, and both defendants remain presumed innocent unless proved guilty.

The indictment's examples include an alleged $87,000 purchase of a transport van with a ward's money, $180,000 allegedly taken from a ward's home-sale proceeds, and lawsuit-settlement money allegedly deposited in the defendants' own account. These are described transactions, not separate penalties or adjudicated losses. The fiduciary and transport roles matter because related business interests can obscure whether a payment benefits the ward. Independent authorization and reconciliation should test the actual purpose, recipient and ownership of expenditures rather than rely solely on the guardian's authority or an invoice from an affiliated service.

A September 30, 2026 DOJ announcement reports that Skyler Garman was sentenced to one year of probation for conspiracy involving distribution of misbranded drugs and conspiracy to commit money laundering. The court also ordered $180,000 forfeited as proceeds of the offenses. Garman admitted unlawful interstate distribution of selective androgen and estrogen receptor modulators from 2019–2021. The $180,000 forfeiture is distinct from the business's sales volume and is not described as a restitution award or a regulatory civil penalty.

Garman used Body Science Supplements and related Savior Research brands to sell products, largely unapproved or misbranded drugs, totaling more than $2.2 million. DOJ describes labels stating not for human consumption despite advice to customers on dosing and performance-enhancing use. The proceeds moved through business and personal accounts, with net profit over $180,000. The mismatch between the label and actual marketing is central: research-use wording did not establish lawful human-use distribution. The source addresses SARMs and SERMs in this scheme; it does not establish that every supplement or every drug in those broad classes is unlawful.

DOJ's September 28, 2026 release reports that Iowa attorney Timothy Mark Anderson was sentenced September 11 to six months in prison after pleading guilty to a false statement relating to a healthcare matter. The court imposed a $25,000 fine, $184,274.36 restitution to Iowa Medicaid and two years of supervised release. The announcement date is separate from the sentence date. The source also states that surrender to prison was to occur on a date yet to be set; it does not establish when imprisonment began.

Between 2017 and 2022, Anderson directed purported purchases, gifts to heirs and discounted repurchases of his luxury vehicles to support elderly clients' Medicaid applications. Purchasers generally did not drive or see the vehicles. In one example, he supplied Iowa Medicaid a $194,000 valuation for a Rolls-Royce despite knowing that figure was false after the vehicle had been damaged. The release describes Iowa's exemption for one automobile used to transport the applicant or household member. The case concerns sham transactions and false representations; that state-specific rule should not be imported into Medi-Cal or treated as a categorical ban on legitimate asset planning.

An October 1, 2026 Massachusetts release reports an indictment of a man identified as John Doe for alleged use of a deceased person's identity to obtain SNAP, MassHealth and an identification card. DOJ says a SNAP application file noted a possible death match and supervisor review, but the application was approved; approximately $12,623 in SNAP benefits allegedly followed. That amount is not identified as a MassHealth loss. The charges remain allegations, with the defendant presumed innocent; prior convictions under the stolen identity do not establish guilt on these new charges.

A separate October 2 Kansas release reports a 24-month sentence for Simon Flores-Torres after a guilty plea to aggravated identity theft. Investigators identified a deceased victim's identity after a suspicious passport application. DOJ reports $95,811 in Social Security, $97,095 in Medicaid and $24,269 in SNAP benefits obtained, with restitution required by the plea agreement. The Kansas sentence is an adjudicated result, while the Massachusetts case remains pending. Together the accounts support documented resolution of identity discrepancies; they do not establish that a death-match warning occurred in both cases or create a new immigration-screening requirement.