The Regulator

340 million dollars: that is how much more Medicare will pay the nation’s inpatient rehabilitation hospitals next year, under a final rule the Centers for Medicare and Medicaid Services published in the Federal Register today. The Centers for Medicare and Medicaid Services finalized CMS-1845-F on July 30, 2026, raising Inpatient Rehabilitation Facility Prospective Payment System rates by a net 2.3 percent for fiscal year 2027, a 3.2 percent market basket update reduced by a 0.9 percentage point productivity adjustment, for an estimated $340 million aggregate increase; the rule publishes in the Federal Register on August 3, 2026 and takes effect October 1, 2026. The rule also holds the facility-level outlier payment threshold, the share of total payments Medicare sets aside for unusually expensive stays, at 3 percent, the same guardrail CMS applied this cycle to hospice and inpatient psychiatric facility payments. Confidence: Medium. The Federal Register’s own published rule and the American Hospital Association’s direct reporting on CMS’s figures corroborate each other; this run’s attempt to fetch CMS’s own fact sheet was blocked. Sources: Medicare Program; Inpatient Rehabilitation Facility Prospective Payment System for Federal Fiscal Year 2027, Federal Register, CMS finalizes payment updates and coverage changes for IRFs, American Hospital Association.

2.76 billion dollars: that is how much the federal government has now frozen in Medicaid payments to California and Minnesota since February, in a recurring quarterly pattern critics call selective enforcement. The Centers for Medicare and Medicaid Services deferred $867.5 million of California’s second-quarter fiscal year 2026 Medicaid spending and $199 million of Minnesota’s on July 21, 2026, pending review of claims tied to high-risk providers, according to an HHS press release; that brings California’s cumulative deferrals since May to $2.21 billion and Minnesota’s since February to $550 million. Georgetown University’s Center for Children and Families, in a July 29, 2026 analysis, said CMS gave California only 10 days and Minnesota 60 days to produce supporting documentation, and argued the agency’s justification, that withholding federal matching funds reduces fraud, “lacks supporting evidence,” since a deferral only delays payment pending review and does not itself establish that a claim is fraudulent. Confidence: Medium. HHS’s own press release confirms the deferral mechanism and the individual dollar figures directly; this run relied on Georgetown’s published tally for the cumulative totals and could not independently retrieve each underlying CMS deferral letter. Sources: HHS Defers More Than $1 Billion in Medicaid Payments to California, Minnesota Pending Review of High-Risk Claims in Crackdown on Fraud, U.S. Department of Health and Human Services, Weaponizing Fraud Against Medicaid in California and Minnesota: Another Quarter, Another Round of Deferrals, Georgetown University Center for Children and Families.

203 million dollars: that is how much in Medicaid payments to 50 providers a new federal data-analytics unit says it flagged in its first 88 days. The Centers for Medicare and Medicaid Services said its Medicaid Fraud War Room, launched April 23, 2026, used billing-pattern analytics to identify 50 high-risk providers linked to more than $203 million in Medicaid payments, coordinating federal exclusions and state enforcement action against them, per a CMS press release issued July 28, 2026. CMS Administrator Mehmet Oz said the unit is mining data the agency already collects to catch fraud faster than traditional audits allow, and CMS cited providers who billed for tests patients did not need among the flagged patterns. Confidence: High. CMS’s own press release states the launch date, provider count and dollar figure directly. Sources: CMS Medicaid Fraud War Room Stops More Than $203 Million in Improper Payments During First 88 Days, Centers for Medicare and Medicaid Services.

26.1 million dollars: that is how much Georgia overpaid clinical laboratories under its Medicaid program over five years, federal auditors say, and they want 18.5 million dollars of it back. HHS’s Office of Inspector General found Georgia’s fee-for-service Medicaid program paid clinical diagnostic laboratories more than Medicare or state rules allowed on 648,412 of 13,603,258 lab services performed from calendar years 2019 through 2023, exceeding allowable reimbursement by $26.1 million, of which $18.5 million is the federal share, in a report issued July 24, 2026. OIG recommended Georgia refund the federal share and tighten its payment-system edits to prevent the overpayments from recurring; a companion OIG audit released the same week found Connecticut’s Medicaid lab claims generally complied with federal requirements, underscoring that Georgia’s gap is a state-specific control failure rather than a national billing quirk. Confidence: High. OIG’s own audit report states the sample, dollar figures and recommendation directly. Sources: Georgia Claimed at Least $26.1 Million More in Medicaid Reimbursements for Clinical Diagnostic Laboratory Services Than Was Allowed by Federal and State Requirements, Office of Inspector General, U.S. Department of Health and Human Services.

552,250 dollars: that is what an Illinois hospital system is paying federal regulators over a ransomware breach it did not report on time, the 21st settlement to come out of a single multi-year federal investigation. HHS’s Office for Civil Rights announced July 29, 2026 that OSF Healthcare System and its affiliated covered entities agreed to pay $552,250 and adopt a two-year corrective action plan to resolve findings that they failed to conduct an accurate risk analysis of electronic health information, impermissibly disclosed the protected health information of 53,907 individuals, and failed to notify those individuals and HHS on time, after Nephilim ransomware encrypted OSF’s files in an incident first identified April 23, 2021. This is OCR’s 21st HIPAA enforcement action to arise from its systematic investigation of healthcare ransomware breaches. Confidence: High. HHS’s own press release and resolution agreement state the settlement amount, violations and enforcement count directly. Sources: HHS’ Office for Civil Rights Settles Ransomware Investigation with Healthcare System, U.S. Department of Health and Human Services, OSF Healthcare System Resolution Agreement and Corrective Action Plan, U.S. Department of Health and Human Services.

12 percent: that is the share of the nation’s nursing homes CMS estimates will qualify for lighter federal inspections under a new policy that patient advocates say puts residents at risk. The Centers for Medicare and Medicaid Services announced July 16, 2026, through Quality, Safety and Oversight memo QSO-26-14-NH, a risk-based survey process giving nursing homes with a 5-star overall rating, at least a 3-star staffing rating, no recent actual-harm or immediate-jeopardy citations, and no staffing waivers or ownership changes a streamlined inspection that uses fewer surveyors and takes roughly half the time of a traditional survey, starting September 2026. Consumer Voice and the Long Term Care Community Coalition have publicly objected, arguing that a facility’s star rating can lag behind conditions on the ground between inspections, so reducing scrutiny of any facility trades resident safety for administrative convenience. Confidence: High on the policy’s mechanics and qualification criteria, which CMS’s own memo states directly; Medium on the 12 percent estimate, which trade press attributes to CMS without a specific agency document this run could independently retrieve. Sources: CMS Modernizes Nursing Home Oversight with New Risk-Based Survey Approach Designed to Highlight High Performance, Encourage Improvement, Centers for Medicare and Medicaid Services, CMS Announces Plans to Reduce Oversight of Some Nursing Homes through “Risk-Based Survey” System, The Consumer Voice.