The Regulator

Three: that is the number of everyday pieces of Medicare paperwork, an enrolled supplier number, a doctor’s order, and a beneficiary’s ID, that federal investigators say fraudsters have turned into a reliable formula for stealing durable medical equipment money from taxpayers. The Department of Health and Human Services Office of Inspector General (OIG) published a white paper this week, “The Nation’s Challenge to Combat Durable Medical Equipment Fraud in Medicare” (OEI-02-24-00311), issued August 17, 2026 and posted to OIG’s site August 20, warning that schemes targeting the durable medical equipment (DME) benefit “continue to evolve” faster than the safeguards meant to stop them. The report identifies three elements fraudsters routinely exploit: a supplier’s Medicare enrollment status, a physician’s order, and an enrollee’s identification number, to bill for equipment patients never needed or never received; OIG notes it has raised concerns about DME supplier fraud for more than a decade. The paper credits the Centers for Medicare and Medicaid Services (CMS) with recently standing up a Fraud Defense Operations Center meant to flag suspicious billing patterns and halt payments before they go out, but calls for “bold action” given how quickly the schemes keep changing. Confidence: High. This run reviewed the OIG report directly. Sources: The Nation’s Challenge to Combat Durable Medical Equipment Fraud in Medicare, HHS Office of Inspector General.

August 22: that is the FDA’s deadline to decide on what would be the first approved therapy for the heart damage Duchenne muscular dystrophy causes, a therapy the agency’s own scientific advisers voted 9 to 3 against approving three weeks ago. The Food and Drug Administration (FDA) faces a Prescription Drug User Fee Act (PDUFA) target action date of August 22, 2026 on deramiocel, a cell therapy from Capricor Therapeutics for Duchenne muscular dystrophy-associated cardiomyopathy, after the agency reinstated review of the company’s Biologics License Application (BLA) following a prior Complete Response Letter and Capricor’s submission of open-label extension data from its HOPE-3 trial. FDA’s Cellular, Tissue and Gene Therapies Advisory Committee voted July 29, 2026 that the evidence did not support the drug’s effectiveness, citing statistical and study-design concerns, including changes Capricor made to its analysis plan after the trial had already ended; sell-side analysts, including Piper Sandler, now expect the FDA to issue a second Complete Response Letter rather than approve the therapy. Confidence: High on the regulatory timeline and advisory vote, drawn from the company’s own securities filings and direct advisory committee coverage. Medium on the rejection outcome, which is an analyst forecast, not a confirmed FDA decision as of this run. Sources: Capricor Therapeutics’ Duchenne treatment is heading for an FDA rejection, STAT News, FDA adcomm shoots down Capricor’s Duchenne cell therapy after meeting marked by statistical dispute, Fierce Biotech.

40.9 percent: that is the biggest 2027 premium increase a single insurer is asking Pennsylvania regulators to approve, in a public comment window that closes tomorrow. The Pennsylvania Insurance Department’s public comment period on insurers’ proposed 2027 individual and small-group health insurance rates, filed with the department May 15, 2026, closes August 22, 2026. Insurers are requesting a weighted-average 17.1 percent increase in the individual market and 11.5 percent in the small-group market; Ambetter Health’s proposed 40.9 percent individual-market increase and UnitedHealthcare Insurance Company’s proposed 33.57 percent small-group increase are the largest filings pending review. Insurance Commissioner Michael Humphreys said the department will examine each filing to ensure rates are “reasonable and justified” before approving, rejecting, or modifying them, with final rates due out this fall. Confidence: High. This run reviewed the Pennsylvania Insurance Department’s own filing summary directly. Sources: Shapiro Administration Receives Proposed 2027 Health Insurance Rates, Pennsylvania Insurance Department.

500: that is how many organizations a ransomware gang has hit since 2021, and federal officials just added HHS’s signature to a warning that hospitals remain a favorite target. The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS) updated a joint #StopRansomware advisory August 18, 2026 on Medusa, a ransomware-as-a-service operation active since June 2021, raising its confirmed victim count to more than 500 organizations as of the FBI’s April 2026 investigations, up from roughly 300 in the original February 2025 advisory. Medical and healthcare organizations are named among the sectors Medusa affiliates continue to target, alongside education, legal, insurance, and manufacturing; this is the first time HHS signed on as a co-sealing agency, added specifically to detail healthcare-sector impact. Medusa uses a double-extortion model, encrypting victim networks and threatening to leak stolen data if a ransom is not paid, and the agencies again urged health systems to patch internet-facing systems, enforce multi-factor authentication, and maintain offline backups. Confidence: High. This run reviewed secondary reporting quoting the joint advisory directly; CISA’s own advisory page returned an access error. Sources: HHS Joins Federal Medusa Ransomware Advisory, Citing Healthcare as a Frequent Victim, healthsystemcio.com, #StopRansomware: Medusa Ransomware, Cybersecurity and Infrastructure Security Agency.

4: that is how many people have been hospitalized in an E. coli outbreak the FDA now says carries its most serious health-risk warning, tied to organic frozen berries this newsletter first flagged last month. The FDA upgraded Publix’s July 29, 2026 recall of GreenWise Organic Whole Blueberries and Whole Mixed Berries, in 10-ounce and 48-ounce packages, to a Class I recall, its most serious risk classification, on August 18, 2026, after confirming the products may be contaminated with Escherichia coli O145:H28, a Shiga toxin-producing strain. The recalled berries, sourced from Frutas y Hortalizas del Sur S.A. in Chile, shipped to Publix stores in Alabama, Florida, Georgia, Kentucky, North Carolina, South Carolina, Tennessee, and Virginia; CDC and FDA have tied 12 illnesses and 4 hospitalizations, all in Florida and Georgia, to the outbreak strain, with no deaths reported. Consumers who bought the recalled berries should discard them or return them to Publix for a refund. Confidence: High. This run reviewed the FDA’s own recall notice directly. Sources: Publix Recalls All Lots of GreenWise Organic Frozen Blueberries and Whole Mixed Berries Due to Potential E. coli O145 Contamination, U.S. Food and Drug Administration, Outbreak Investigation of E. coli O145:H28: Frozen Blueberries, U.S. Food and Drug Administration.