Weekly healthcare intelligenceRegulation · Enforcement · Government payersAll editions →
Complete report · Enforcement Briefing

Enforcement Briefing, November 4, 2026

Published November 4, 2026Coverage October 25–31, 2026, Pacific

Read this edition’s coverage limitations ↓

Coverage and scope

Coverage limitations: California legislative result-set and bill-history coverage is incomplete under the approved one-edition disclosure. Four CDPH sources were not fully verified. Coverage of DHCS, Medi-Cal, Noridian and named federal sources is also incomplete. Do not interpret a missing item as zero results or complete coverage.

Enforcement coverage: DOJ district, OIG enforcement, OCR enforcement, FTC health-privacy and California enforcement discovery remain incomplete. The agreement listing and historical examples below do not establish a complete 90-day agreement inventory or 8–12-week enforcement trend, and do not show that no other relevant actions occurred.

Executive triage

  • Clinical and billing compliance: Use the DOJ-attributed Mailyan sentencing account to examine the documented services, medical necessity and referral support relevant to the organization; billed, ordered and collected amounts are different measures.
  • Security and privacy: Use the Hive case to review cyber incident response and recovery arrangements without assuming that every victim suffered the same effects.
  • Enrollment, accessibility and legal teams: Assess the hospice enrollment decision and Kentucky communication agreement in light of their actual facts, affected facilities and scope. Virginia and Minnesota charges remain allegations.

Changes since the October 18 edition

The in-window accounts include the Mailyan and Stryzhak sentencings, Glencare and Monasak administrative decisions, the Kentucky communication-agreement announcement, the Virginia arrest announcement and the grouped Minnesota charging matters. A bounded comparison found no exact name match in the prior 19 findings; aliases and case-level duplicates still require reconciliation. Allegations remain allegations, and administrative decisions are not criminal convictions.

Roy and Ramancha are an update to previously published finding GC-2026-0207, not a new case. The HCFAC fact sheet is retrospective national context, and the November 2 agreement index is a later observation rather than a November 1 historical snapshot. Other earlier findings are not presumed resolved or unchanged merely because this edition does not repeat them.

Primary stories

DOJ reports California physician sentenced in Medicare Botox billing case

High priorityNew in this editionRead article →

Scope: DOJ is the source for the sentencing account. The judgment, appeal status and actual collections or net recovery have not been independently established.

Summary

DOJ reports that a California physician received a 15-year sentence after convictions in a Medicare Botox billing scheme. The court ordered restitution and forfeiture, with restitution collection and net recovery not established in the announcement.

What changed

DOJ announced October 30 that a federal court sentenced California physician Violetta Mailyan to 15 years in prison on October 29. DOJ reports that, following a six-day jury trial ending in May 2026, she was convicted of nine wire-fraud counts and three counts of obstruction of a criminal investigation of a health care offense. DOJ says the case involved more than $45 million billed to Medicare for Botox services that were medically unnecessary or never provided. According to the release’s account of trial evidence, thousands of billed injections were never given, were cosmetic, or involved patients whose primary-care physicians had not referred them for chronic-migraine treatment; claims representing more than $19 million purportedly concerned days when the clinic was closed. Those are billed amounts, not a finding that the same amount was paid or recovered.

DOJ reports that the court ordered $32,904,049.41 in restitution to Medicare and immediate forfeiture of more than $16,029,742 in seized property, including real and personal property, securities and bank funds. Those are distinct court-ordered amounts; the announcement does not establish the amount of restitution collected or net recovery after any allocation. DOJ also describes evidence of falsified medical records and forged beneficiary signatures submitted to investigators. This account is based on the agency’s announcement. The judgment, appeal status, trial record and actual collections or net recovery have not been independently established.

Why it matters

For providers administering high-cost injectable drugs, the reported conduct illustrates the value of reconciling documentation and billing against actual patient encounters, clinical indications, drug administration and practitioner availability.

Suggested action

Compliance and revenue-cycle owners can test a risk-based sample for services billed during office closures or provider absences and investigate discrepancies, while preserving records and escalating suspected falsification through established procedures. The case does not establish that an unmatched referral alone proves fraud or that a particular organization has violated a rule.

Sources

Hive ransomware sentencing

Medium priorityNew in this editionRead article →

Scope: This account is attributed to DOJ. The announcement is not a court judgment, and broader source coverage remains incomplete.

On October 27, a federal court sentenced Artem Stryzhak to 70 months in prison for his role in Hive ransomware activity, DOJ reported. DOJ attributed roughly 1,500 victims to the wider conspiracy and seven victims to Stryzhak and co-conspirators. DOJ described a hospital disruption in its account of the wider group; it did not identify that hospital as one of the seven.

The reported disruptions illustrate the importance of healthcare continuity and recovery planning. They do not establish that every victim suffered the same harm or that all ransom proceeds were recovered.

DOJ reports that Stryzhak pleaded guilty in December 2025 and describes an FBI-provided decryption key supplied to one victim without a ransom payment. Those facts do not establish the same outcome for every victim.

Suggested action: Healthcare organizations can test their own downtime and recovery plans, including how teams communicate and prioritize patient services when systems are unavailable. These are suggested risk-management steps, not new duties established by the sentence.

DOJ sentencing announcement

California hospice enrollment decision

Medium priorityNew in this editionRead article →

Scope: This is an administrative decision concerning an earlier revocation, not a newly imposed 2026 revocation. Current appeal and preclusion status remain open.

In an October 27, 2026 decision, an HHS administrative law judge affirmed CMS’s authority to revoke Glencare’s Medicare enrollment and place it on the preclusion list, based on the billing findings described in the decision. The contractor’s original notice was issued in August 2024, and the revocation took effect in September 2024. The judge said the length of the ten-year reenrollment bar was outside the judge’s review authority.

Why it matters: The decision concerns this hospice’s enrollment appeal; it does not establish a general hospice error rate or a criminal conviction.

Suggested action: Providers facing an enrollment action can review the applicable response and appeal process promptly, identify who holds relevant billing and clinical records, and preserve and submit supporting evidence at the appropriate stage.

HHS ALJ decision CR7006

Kentucky dialysis communication agreement

Medium priorityNew in this editionRead article →

Scope: This is a case-specific agreement. Many of its communication measures apply to defined Kentucky facilities; this account does not establish completed payments or a nationwide mandate.

On October 27, DOJ announced an ADA settlement following a complaint concerning communication with a deaf patient at a Lexington, Kentucky dialysis facility. DOJ said its investigation substantiated the complaint and that DaVita cooperated. The agreement says DaVita denies the allegations and is not admitting liability. DOJ describes updates to communication policies and practices, staff training and complaint reporting. The agreement describes measures for defined Kentucky facilities and provides for compensation and a civil penalty, subject to its conditions; it does not establish that those amounts have been paid.

The agreement highlights the importance of assessing effective communication and documenting appropriate services for patients with disabilities. Organizations should assess their own obligations and circumstances rather than assume the case-specific agreement applies to every facility.

Suggested action: Organizations can review how they assess communication needs, make appropriate services available and document follow-through on concerns. They should assess their own applicable obligations rather than treat this agreement as a mandate for every provider.

DOJ announcement | Agreement

Virginia behavioral-health charges

Medium priorityNew in this editionRead article →

Scope: The charges are allegations, and the defendant is presumed innocent unless proven guilty. The amount describes alleged claims, not an established loss, payment or recovery.

On October 28, DOJ announced the arrest of a Virginia mental-health provider executive charged in connection with Medicaid crisis-services billing. DOJ alleges more than $49 million in false claims were submitted from January 2022 through April 2026, and describes alleged discrepancies between documented and actual staffing, falsified signatures and inducements. The indictment was returned October 20; the charges are allegations, and the defendant is presumed innocent unless proven guilty.

Why it matters: The announcement describes alleged conduct in one case; it does not establish that other behavioral-health providers engaged in the same conduct.

Suggested action: Compliance teams can compare actual clinician participation and credentials with service records and submitted claims, and investigate material discrepancies through established processes. This is a suggested internal review, not a new requirement imposed on other providers by the case.

DOJ announcement

Context

Context: current OIG agreement index snapshot

Context and reference material

Scope: This is a dated, bounded November 2 observation. It is not an archived November 1 snapshot, a complete 90-day inventory or a review of every agreement's terms.

On November 2, 2026, OIG’s browse index displayed 12 first-page entries with latest-update dates from August 7 through October 13, 2026: nine Corporate Integrity Agreements, two Integrity Agreements and one Heightened Scrutiny entry marked “refused.” These are OIG's index labels, not findings about why a status was applied. The index showed 335 entries sorted by latest update, with July 13 as the next displayed date after those 12. A second observation later on November 2 showed the same breakdown. Neither observation establishes a complete archived November 1 state or every change during the review period. Agreement-specific obligations require review of the applicable instrument.

OIG browse agreements

Historical context: diagnosis support and equipment orders

Context and reference material

Scope: These are qualitative examples from retained reports, not a count of independent schemes, evidence of an increase or a complete 8–12-week enforcement trend. Some underlying source texts still need review.

In retained reports, DOJ described False Claims Act agreements with Monogram Health, announced August 24, 2026, and The Villages Health System, announced August 26, 2026, involving alleged unsupported Medicare Advantage diagnoses; liability was not determined. Separate reported durable medical equipment-related criminal actions included the September 4 announcement of Kessler and Gomez sentences and prior reports of a Steven Powell sentence, a Leo Anzivino Jr. guilty plea and a Brett Blackman sentence. The exact dates of those latter events require verification. These illustrations involve differing conduct and procedural postures and do not establish an increase or comprehensive trend.

Monogram announcement | Villages announcement | Kessler and Gomez announcement | Powell dated DOJ listing | Anzivino announcement | Blackman announcement

Context: HCFAC fiscal-year 2025 enforcement fact sheet

Context and reference material

An HHS OIG fact sheet issued and posted October 28 reports more than $6.9 billion in fiscal-year 2025 civil healthcare fraud settlements and judgments under the False Claims Act. The fact sheet separately reports a return of $3.20 for each $1 spent over fiscal years 2023–2025. The settlements-and-judgments figure is not a stated cash-collection total, and the return covers three years, not fiscal 2025 alone. This is a national retrospective fact sheet, not the complete annual report or an in-week count of new cases.

HHS OIG fact sheet

Forward horizon

These are source-displayed or previously reported dates, not independently verified current court calendars or proof of case outcomes.

  • November 13, 2026: The previously reported Curtis DEA order stated an effective date for revocation and denial of pending applications. It was an administrative order, not a conviction; later relief and current registration are unverified. DEA order.
  • December 8, 2026: The DOJ case page displayed a Roy status conference. Check the current docket before relying on the date; charges against Roy and Ramancha remain allegations.
  • January 21, 2027: The earlier Anzivino announcement reported a scheduled sentencing following a guilty plea. The current docket and any later sentence require confirmation. DOJ announcement.

Coverage limitations: This is a bounded review of identified announcements and qualified status observations, not an exhaustive case or agreement inventory. Certain OCR resolution documents, a Maine case announcement and an OIG advisory opinion were not available for full verification; broader agency and field-office screening also had limits. Unsupported details from those documents are omitted. The OIG agreement-index discussion is a dated November 2 observation, not an archived November 1 reconstruction. Allegations are not findings of liability. OCR resolution agreements | OIG agreements

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies