HRSA posts FY2026 340B audit results as OCR settles ransomware cases
Issue
HRSA posted its FY2026 340B Manufacturer Audit Results page, updated May 28, 2026, and will add corrective action plans and sanctions as it approves them. OCR has completed 19 ransomware investigations with six 2026 settlements, and a June 1 Sidley analysis says they preview a tougher HIPAA Security Rule.
Those amendments would make yearly risk analyses mandatory.
Key points
- HRSA posted FY2026 340B manufacturer audit results, updated May 28, and FQHCs, the largest 340B group, can watch for corrective plans and sanctions.
- OCR's 19 ransomware investigations and six 2026 settlements point to a stricter HIPAA Security Rule, so health centers can finish a documented Security Risk Analysis.
Sources for this story
Sidley Data Matters / HRSA OPA / Nixon PeabodyPart of
- Enforcement: privacy, fraud and audits
HIPAA rules and OCR enforcement
- 340B drug pricing
HRSA audits and repayment
Sources for your board packet
This story's source plus 4 related stories and their sources, ready to print for your team or board.
Free. Unlocking the packet subscribes you to Intel Brief. You'll also get a short welcome series and the occasional product update. You'll be subscribed right away, with no confirmation email. Unsubscribe with one click in any issue. If you unsubscribed before, we won't re-add you. We never sell your email. You can open each source above without an email.
More in Risk & Compliance
Nov 9
CMS gives drugmakers no safe harbor when 340B entities withhold claim data
Nov 5
Missouri drops and Colorado delays the Medicaid work requirement hardship exception
Nov 4
CMS makes Part D 340B claims reporting mandatory starting in 2027
Nov 3
HHS finalizes Section 504 rule on gender dysphoria and disability
FQHC Talent. (2026, June 1). HRSA posts FY2026 340B audit results as OCR settles ransomware cases. Source: Sidley Data Matters / HRSA OPA / Nixon Peabody. Retrieved November 11, 2026, from https://www.fqhctalent.com/intel/hrsa-fy26-340b-audit-ocr-risk-analysis-security-rule-preview-2026