On May 27, 2026, the Department of Justice announced that Oglethorpe Inc., a Tampa-based psychiatric hospital operator, along with its founder, CEO, and COO, agreed to pay $32 million to resolve allegations that they violated the False Claims Act (FCA) by knowingly failing to return Medicare overpayments identified by their own consultants. The defendants also agreed to a 10-year voluntary exclusion from all federal health care programs, effective July 2026, following the government’s conclusion they had violated a preexisting corporate integrity agreement (CIA) arising from a prior FCA settlement.
Four former Oglethorpe employees brought the case on behalf of the United States under the FCA’s qui tam provision. The United States partially intervened in February 2026, focusing on alleged retention of overpayments tied to inpatient psychiatric admissions at two hospitals and a substance abuse clinic that were purportedly medically unnecessary.
The settlement rested on the FCA’s “reverse false claims” provision, 31 U.S.C. § 3729(a)(1)(G), which imposes liability for knowingly concealing or avoiding an obligation to repay to the government. Under the Affordable Care Act’ (ACA) 60-day rule, 42 U.S.C. § 1320a-7k(d), failure to timely report and return an identified overpayment creates such an obligation.
Revised 60-Day Rule Raises the Stakes for Providers
The ACA requires Medicare providers and suppliers to report and return overpayments within 60 days of identification. Initially, the Centers for Medicare & Medicaid Services (CMS) defined “identification” to include situations when a provider or supplier determined, or should have determined through the exercise of reasonable diligence, that it received an overpayment. The standard included both proactive compliance activities and responses to credible information about potential overpayments.
After a federal court found that the reasonable-diligence standard violated the Administrative Procedure Act, CMS amended the rule so that the "identified" standard now tracks the FCA's "knowingly" standard, 42 C.F.R. § 401.305(a)(2). That is, an overpayment is identified when a provider has actual knowledge, acts in deliberate ignorance, or acts in reckless disregard of its existence—even before the amount is quantified.
The revised rule also allows providers and suppliers that identify an initial overpayment to suspend the 60-day reporting clock for up to 180 days while conducting a documented, good-faith investigation of related overpayments, 42 C.F.R. § 401.305(b)(3).
In practice, the repayment clock for returning overpayments starts earlier than under the previous regulatory regime. At the same time, providers that promptly investigate and document the overpayments may rely on a formal safe harbor to avoid FCA liability during the investigation period.
CRUSH Initiative Signals Intensified Enforcement Environment
The Oglethorpe settlement comes amid an increasingly aggressive federal healthcare fraud enforcement landscape.
On February 25, 2026, federal leadership announced the Comprehensive Regulations to Uncover Suspicious Healthcare (CRUSH) initiative, a coordinated effort targeting fraud, waste, and abuse across Medicare, Medicaid, the Children’s Health Insurance Program, and the ACA Marketplace.
FY 2025 by the Numbers
| Metric | Result |
|---|---|
| Total Medicare program integrity savings | $41.9 billion (up 59% from FY 2024) |
| Return on investment | $22.3 to 1 (highest ever recorded) |
| Payments suspended | $5.7 billion |
| Provider/supplier billing privileges revoked | 5,586 |
| Fraud referrals to law enforcement | 372 referrals covering $3.7 billion |
Key developments to date include:
- Enrollment moratoria. CMS imposed a six-month nationwide moratorium on new Durable Medical Equipment, Prosthetics, Orthotics, and Supplies (DMEPOS) supplier enrollment in February 2026, followed by a six-month nationwide moratorium on home health agency and hospice enrollment on May 13, 2026.
- Medicaid funding deferrals. CMS deferred $259.5 million in federal Medicaid matching funds to Minnesota, with potential deferrals exceeding $1 billion if identified deficiencies are not addressed. CMS has signaled similar actions may follow in other states.
- Hospice and home health suspensions. The administration suspended 447 hospices and 23 home health agencies in Los Angeles alone, with the government estimating fraud in excess of $600 million.
- CRUSH rulemaking. CMS published a request for information (CMS-6098-NC) on February 27, 2026, seeking input on a proposed rule that could expand provider enrollment screening, identity proofing, ownership disclosure requirements, preclusion list reforms, AI-assisted claims review, and surety bond requirements.
CMS has described this as a shift from a reactive “pay and chase” model to a proactive “detect and deploy” strategy that uses AI to flag suspicious payments before funds are disbursed.
Key Takeaways for Providers
- Act promptly on credible information. The government alleged that Oglethorpe’s own consultants identified the overpayments. Under the revised “knowingly” standard, credible information from internal audits, compliance hotlines, or claims analytics that goes uninvestigated may itself constitute identification triggering the 60-day clock.
- Executive exposure is increasing. Three C-suite officers were named individually. Officers aware of overpayment issues who fail to ensure timely reporting may face personal FCA liability and exclusion risk. Targeting specific executives in FCA settlements has been a growing trend and reflects the Department of Justice’s position that corporate fraud resolutions should include individual executive accountability.
- CIA compliance is critical. Oglethorpe’s alleged breach of its prior CIA transformed a financial settlement into a 10-year program exclusion—effectively a death sentence for any Medicare-dependent provider.
- Enforcement environment is intensifying. CRUSH is not aspirational. CMS has already revoked 5,586 providers, imposed two nationwide enrollment moratoria, and deferred hundreds of millions in Medicaid funds. The forthcoming CRUSH rule could further expand CMS’s enforcement toolkit.
- Update overpayment policies. Providers should ensure internal protocols reflect the revised “knowingly” standard, articulate triggers for when the 60-day clock begins, formalize investigation procedures to take advantage of the 180-day safe harbor, and require documentation throughout the process.
- Evaluate self-disclosure options. Submission to the Office of Inspector General (OIG) Self-Disclosure Protocol tolls the 60-day deadline and has historically been viewed favorably by enforcement authorities. Self-disclosures can be powerful tools for potentially limiting liability from overpayments because OIG typically resolves matters using a 1.5x multiplier on single damages rather than the FCA’s 3x multiplier.
AlstonHealth State Law Hub
Alston & Bird’s Health Care team highlights state legislation and regulatory actions with direct implications for operations, reimbursement, privacy, and enforcement risk. Designed for in-house counsel, the tracker supports legal teams in proactively managing risk and aligning business strategy with a rapidly evolving state regulatory environment.
Learn more on the AlstonHealth State Law Hub.
If you have any questions, or would like additional information, please contact one of the attorneys on our Health Care team.
You can subscribe to future advisories and other Alston & Bird publications by completing our publications subscription form.
