Kansas hospital pays $250K to settle charges it falsified EHR security risk assessment

Coffey Health System, a hospital in Kansas, has agreed to pay a $250,000 settlement for falsely claiming it had conducted the necessary security assessment to comply with the federal Electronic Health Records Incentive Program. The hospital submitted false claims to Medicare and Medicaid programs, and will pay the settlement for alleged False Claims Act violations. As part of the settlement, whistle-blowers will receive $50,000. The U.S. Department of Health and Human Services and the United States Attorney’s Office led the investigation. It is important for healthcare providers to ensure the security of electronic health records to protect patient information.