Loading story…
The U.S. Department of Health and Human Services (HHS), through the Centers for Medicare & Medicaid Services (CMS), announced plans to use advanced AI to detect and prevent Medicare and Medicaid fraud earlier in the claims lifecycle, aiming to stop scam claims before payment. As part of a broader fraud “crackdown,” regulators also issued a Request for Information (RFI) seeking healthcare-sector input on how AI should be used and how potential future rulemaking might be shaped.
Healthcare legal and privacy experts generally welcomed the initiative but warned the RFI does not clearly address how CMS will secure HIPAA-protected data for beneficiaries when deploying AI at scale. CMS also outlined additional anti-fraud measures alongside the AI effort, including a six-month moratorium on new Medicare enrollment for certain durable medical equipment suppliers and the temporary deferral of $259.5 million in federal Medicaid payments (with the potential to reach up to $1 billion over the year) tied to suspected fraud controls.
Track how attackers are adapting to this technology.
4 events from the most recent confirmed update back to the earliest known activity.
HHS/CMS temporarily deferred $259.5 million in federal Medicaid payments to Minnesota, with officials indicating the amount could rise to as much as $1 billion, over allegedly fraudulent or unsupported claims. Minnesota's governor's office did not immediately comment on the allegations.
As part of the broader anti-fraud effort, CMS proposed a six-month moratorium on new Medicare enrollment for certain durable medical equipment suppliers. The measure was presented as a preventive step to reduce suspected fraud exposure.
CMS issued a Request for Information seeking healthcare-sector input on AI use cases, including medical record abstraction and coding oversight, and on possible future rulemaking under the "Comprehensive Regulations to Uncover Suspicious Healthcare" initiative. The request raised questions about compliance, hallucinations, and operational safeguards for AI-assisted fraud detection.
The U.S. Department of Health and Human Services and the Centers for Medicare and Medicaid Services announced plans to use advanced AI to detect and prevent Medicare and Medicaid fraud before improper claims are paid, shifting away from a pay-and-chase model. The initiative was framed as part of a broader healthcare fraud crackdown.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
U.S. federal officials said artificial intelligence and advanced analytics helped uncover **$6.5 billion** in fraudulent healthcare claims during the 2026 National Health Care Fraud Takedown, leading to charges against **455 defendants**, including nearly **100 physicians and other licensed clinicians**. The cases involved alleged Medicare, Medicaid, and opioid abuse schemes, and were pursued through coordination among the Department of Justice, the Department of Health and Human Services, all 50 states’ Medicaid fraud control units, and 45 state attorneys general. Officials said the operation also produced the first prosecution tied to the agencies’ **Fusion Center**, which combines data analytics with financial analysis and helped expose an alleged **$67 million Illinois Medicaid behavioral health billing scheme**. HHS, DOJ, and the Centers for Medicare and Medicaid Services said they are expanding AI-based fraud detection through a new arrangement giving DOJ cloud computing capacity for advanced analytics, while experts cautioned that data quality problems, false positives, privacy risks, and overreliance on automation remain significant concerns.
Jun 30, 2026
AI-driven healthcare tools are expanding rapidly, but legal and security protections for patient data often lag behind their clinical ambitions. Reporting highlighted that consumer-facing medical chatbots and AI health offerings from **OpenAI**, **Anthropic**, and **Google** may fall outside **HIPAA** obligations in many common use cases, meaning sensitive health information shared with these services may not receive the same statutory protections as data handled by regulated healthcare providers; experts warned that terms-of-service promises are not equivalent to regulated safeguards and that non-HIPAA consumer health data can be sold or shared with third parties, including data brokers. Separately, an investigation summarized from Reuters described patient-safety concerns tied to “AI-enhanced” medical devices, citing lawsuits and FDA adverse-event reporting that allege AI-related changes contributed to serious surgical injuries. One example involved an AI-updated sinus surgery navigation system where reported malfunctions increased sharply after an AI “enhancement,” though the reporting noted FDA incident data is incomplete and does not by itself prove causation; the same coverage also pointed to a higher recall rate for FDA-authorized medical AI devices versus baseline and described FDA capacity constraints in reviewing AI-enabled devices due to staffing losses in relevant technical teams.
Jun 29, 2026
Artificial intelligence is increasingly influencing the healthcare sector's cyber threat landscape, with both attackers and defenders leveraging AI tools. Experts warn that as larger healthcare organizations strengthen their defenses, cybercriminals are shifting focus to smaller medical practices, insurers, and third-party vendors, which often lack the resources and sophistication to counter advanced AI-driven attacks. The complexity of the healthcare ecosystem, with frequent data exchanges among various entities, further amplifies the risk of breaches, particularly among less mature organizations. In response to the surge in healthcare cyberattacks and data breaches, the US Department of Health and Human Services (HHS) proposed updates to the HIPAA Security Rule aimed at bolstering cybersecurity requirements. However, these proposed changes have faced significant pushback from industry groups, who argue that the new rules impose unrealistic financial and operational burdens, especially given the short implementation timelines. A coalition of over 100 healthcare organizations has called for the immediate withdrawal of the proposed rule, highlighting the tension between regulatory efforts to address AI-driven threats and the industry's capacity to comply.
Jun 29, 2026