WASHINGTON, D.C. – Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, Congressman John Joyce, M.D. (PA-13), Chairman of the Energy and Commerce Subcommittee on Oversight and Investigations, and Congressman Morgan Griffith (VA-09), Chairman of the Energy and Commerce Subcommittee on Health, are continuing their ongoing investigation into waste, fraud, and abuse within Medicaid programs by sending letters to ten additional states to request information and documents on the actions each state is taking to strengthen Medicaid program integrity. These requests come amidst reports and law enforcement actions that have demonstrated high levels of Medicaid fraud across numerous states.
For example, in Massachusetts, a woman pleaded guilty to fraudulently billing MassHealth for $500,000 in Personal Care Attendant, home health, and adult foster care…
CLICK HERE to read the FULL E&C Leaders Expand Investigation into Medicaid Fraud Nationwide article.
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.
