CVS Faces Lawsuits Over Alleged $62M Fraud in 340B Drug Savings
Severity: Medium (Score: 51.8)
Sources: News.Bloomberglaw, Kcur
Published: · Updated:
Keywords: drug, million, prescription, university, hospital, authority, nearly
Severity indicators: hospital, university
Summary
The University of Kansas Hospital Authority is suing CVS, claiming the company fraudulently diverted nearly $62 million in prescription drug savings from the federal 340B program between 2020 and 2025. The lawsuit alleges that CVS's actions were intentional and aimed at enhancing its profitability. CVS reportedly terminated its contract with KU in retaliation for the hospital's request for an audit. Similarly, the University of Michigan has filed a lawsuit against CVS for allegedly making $66 million in illegal profits from the same program. Both lawsuits highlight the ongoing issues with the 340B program, which is designed to provide discounted drugs to hospitals serving low-income patients. CVS has declined to comment on the ongoing litigation. The cases reflect broader concerns about the integrity of the 340B program and its potential for abuse. Key Points: • KU Hospital Authority alleges CVS diverted $62 million in 340B savings. • University of Michigan claims CVS made $66 million in illegal profits from the same program. • Both lawsuits indicate significant concerns regarding the management of the 340B Drug Pricing Program.
Detailed Analysis
**Impact** The University of Kansas Hospital Authority and the University of Michigan Hospitals and Health Centers are affected, alleging CVS diverted approximately $62 million and $66 million respectively in savings from the federal 340B Drug Pricing Program between 2020 and 2025. The fraud impacts healthcare providers serving low-income and uninsured patients across Kansas and Michigan, potentially reducing funds meant for charitable and free medical care. The business consequences include legal action under RICO statutes and contract termination, with reputational and financial risks for CVS and its subsidiaries. **Technical Details** No specific cyberattack vectors, malware, CVEs, or infrastructure details are provided in the articles. The alleged fraudulent activity involves financial and contractual manipulation within CVS’s pharmacy benefit management and drug claim processing operations, not a traditional cyber intrusion or exploitation. No indicators of compromise (IOCs) or technical TTPs are mentioned. **Recommended Response** Healthcare providers and contracting organizations should conduct thorough audits of 340B program transactions and contracts with pharmacy benefit managers to detect discrepancies in drug pricing and savings distribution. Legal and compliance teams should monitor ongoing litigation outcomes and review internal controls related to 340B claims processing. Cybersecurity teams should remain vigilant for any related insider threats or fraud indicators but no specific technical mitigations can be recommended based on available information.
Source articles (2)
- KU Hospital Authority says CVS stole nearly $62 million in prescription drug savings — Kcur · 2026-05-20
The University of Kansas Hospital Authority is suing CVS and its subsidiaries, alleging the mega pharmacy company fraudulently diverted nearly $62 million in prescription drug savings. A lawsuit alleg… - University of Michigan Sues CVS Over 340B Drug Discount Profits — News.Bloomberglaw · 2026-05-19
CVS Health Corp. made illegal profits of $66 million since 2020 on prescription drugs sold through the federal 340B drug discount program, the University of Michigan Hospitals and Health Centers said…
Timeline
- 2026-05-19 — University of Michigan files lawsuit against CVS: The University of Michigan Hospitals claims CVS made $66 million in illegal profits from the 340B program since 2020.
- 2026-05-20 — KU Hospital Authority files lawsuit against CVS: The University of Kansas Hospital Authority alleges CVS fraudulently diverted nearly $62 million in 340B savings between 2020 and 2025.
Related entities
- kcur.org (Domain)
- ksnewsservice.org (Domain)
- [email protected] (Email)