Emrandhipaa CMS Expands Medicare Advantage Audits to All Eligible Contracts
Article Content
- •CMS will audit all eligible Medicare Advantage contracts each payment year.
- •The expansion aims to address $17 billion in annual Medicare Advantage overpayments.
- •CMS is adding resources to expedite audits from 2018 to 2024.
On October 17, 2026, the Centers for Medicare & Medicaid Services (CMS) announced a major expansion of its auditing strategy for Medicare Advantage (MA) plans. This new approach will involve auditing all eligible MA contracts for each payment year and adding resources to expedite the completion of audits from 2018 to 2024. CMS aims to address significant overbilling issues, with estimates suggesting that unsupported diagnoses lead to $17 billion in annual overpayments. The audits will verify the accuracy of diagnoses used for risk-adjusted payments, which are crucial for determining payments for Medicare patients. The expansion reflects a commitment to combat fraud, waste, and abuse in federal healthcare programs. This change follows a history of delays in completing previous audits, with the last major recovery of overpayments occurring after the audit of payment year 2007. The new strategy is expected to enhance oversight and accountability in the Medicare Advantage program.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Centers For Medicare & Medicaid Services in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the new auditing requirements?
How much is at stake with these audits?
What is the timeline for the audits?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…