Healthcare and Federal Procurement Fraud: Are You A DOJ Target?

You Have Too Much at Stake — Financial Exposure and Criminal Liability Are Real

  • No person or organization wakes up one morning and sets out to commit fraud.

  • But be careful, as the DOJ is constantly using its AI and Data Analytics to identify unusual billing practices.

  • You do not want to attract their attention because, as Judges will tell you, the DOJ wants Convictions!

  • Don’t be the Dog in this fight.

 

In most cases, exposure arises not from a single conscious decision, but from incremental choices—small deviations, rationalized conduct, or overlooked controls—that gradually move operations across a line that is clearer in hindsight than it was in the moment.

For healthcare executives, compliance officers, federal contractors, and participants across the healthcare supply chain, that line is now being defined not just by law—but by data.

m

An Unmistakable Priority: Healthcare and Procurement Fraud

The DOJ has made clear, through both policy and recent enforcement activity, that healthcare fraud and federal procurement fraud remain among its highest enforcement priorities.

  • Recent prosecutions illustrate the scale and seriousness of this focus. In one widely reported case, a Minnesota nonprofit executive was sentenced to nearly 42 years in prison for orchestrating what the DOJ described as the “single largest COVID-19 fraud scheme in the country.”[1]

These outcomes are not isolated. They reflect a sustained enforcement posture across industries and jurisdictions.

For legal professionals, this signals continued expansion of parallel civil and criminal exposure, particularly under the False Claims Act (FCA). For operators, the message is more immediate:

h

Your industry is under continuous scrutiny.

m


A Structural Shift: Enforcement Driven by Data and AI

The most consequential evolution in enforcement is not simply volume—it is methodology.

 

The DOJ has institutionalized reliance on:

  • Advanced data analytics

  • Artificial intelligence and machine learning

  • Statistical outlier detection

  • They work for free, never sleep, and do not need days off or vacations. 24/7/365.

Through its Civil Division, the DOJ has formally acknowledged that“sophisticated data analytics have become an increasingly important means of identifying fraud trends and uncovering patterns of misconduct across federal programs.”[2]

This shift is operationalized through initiatives like FOCUS (Fraud Oversight through Careful Use of Statistics), announced on April 30, 2026.[3] The initiative is designed to identify and prioritize False Claims Act cases based on public data analysis rather than insider complaints, reflecting a major paradigm shift in enforcement.[4]

DATA MINING. Deputy Assistant Attorney General Brenna E. Jenny emphasized that the Department is actively seeking engagement with data analysts capable of identifying fraud signals, noting that participants must demonstrate how their methodologies“provide a reliable basis for identifying high-quality, actionable False Claims Act matters.”[5]

The implication is clear:

Fraud detection is no longer reactive—it is continuous, data-driven, and scalable.

 


Coordinated Enforcement and Expanding Strike Forces

The DOJ is also expanding its operational reach through coordinated enforcement.

On April 30, 2026, the DOJ announced the creation of the West Coast Health Care Fraud Strike Force, a multi-district initiative bringing together federal prosecutors, investigators, and data analytics resources to target complex fraud schemes.[6]

This Strike Force integrates:

  • DOJ Fraud Division resources

  • U.S. Attorney’s Offices across multiple jurisdictions

  • Federal law enforcement and regulatory partners

THE RESULT.

Woman at center of sprawling Minnesota fraud gets nearly 42-year prison sentence

  • AP News, The U.S. Justice Department, however, said she was at the top of the “single largest COVID-19 fraud scheme in the country.” “I understand I failed. I failed …

  • Historically, the Health Care Fraud Strike Force model has charged thousands of defendants and uncovered tens of billions of dollars in fraudulent billing, underscoring its effectiveness as a primary enforcement tool.[7]

For both counsel and operators, the takeaway is direct:

Enforcement is coordinated, data-enabled, and accelerating.

 


CMS, AI, and the Rising Compliance Standard

Regulatory oversight is evolving in parallel.

The Centers for Medicare & Medicaid Services (CMS) has introduced the WISeR Initiative (Wasteful and Inappropriate Service Reduction), which leverages artificial intelligence and machine learning to review medical-necessity and prior-authorization decisions.[8]

The program is explicitly designed to target services vulnerable to fraud, waste, and abuse, while improving Medicare payment integrity.[9]

This introduces an emerging area of liability:

  • AI-assisted documentation and billing may serve as enforcement triggers

  • Providers remain responsible for the outputs and accuracy of AI-supported processes

  • Data inconsistencies or anomalies may be interpreted as potential false claims

The result is a new compliance reality:

Organizations are accountable not only for conduct, but for the systems they rely on.

 


The Reality of Consequences

Recent enforcement outcomes demonstrate the magnitude of risk:

Multi-year—and even multi-decade—prison sentences

  • A judge in the Middle District of Florida sentenced a defendant to 63 months in federal prison for submitting a fraudulent Paycheck Protection Program (PPP) loan application. The court ordered forfeiture in the amount of $739,582.

Substantial forfeitures and financial penalties

Reputational damage, exclusion from federal programs, and operational disruption

Enforcement actions increasingly originate from:

  • Data analytics identifying statistical anomalies

  • Qui tam whistleblower filings (including “data miner” cases)

  • Certifications submitted in the ordinary course of business

As DOJ has noted, data miners—external actors analyzing public datasets—are now responsible for a substantial portion of FCA filings.[10]


A Narrow but Meaningful Option: Voluntary Self-Disclosure

The DOJ’s Corporate Enforcement and Voluntary Self-Disclosure Policy (CEP) continues to provide incentives for organizations that act early.

Companies that:

  • Voluntarily disclose misconduct

  • Cooperate fully

  • Implement timely remediation

May be eligible for:

  • Declinations

  • Non-Prosecution Agreements

  • Significant reductions in penalties

However, these outcomes depend heavily on timing, credibility, and the absence of aggravating factors.

Waiting until an investigation begins may eliminate meaningful options.

 


From Awareness to Action

For legal advisors and business leaders alike, the implications are clear:

Organizations should assume:

  • Their data is being analyzed for anomalies

  • Enforcement may originate from outside the organization

  • Investigations may begin before internal issues are identified

Mitigation requires proactive alignment:

  • Conduct targeted, data-driven compliance audits.

  • Evaluate governance over AI and automated decision-making.

  • Strengthen internal controls and documentation standards.

  • Engage experienced counsel early when risk signals emerge.


Final Perspective

The enforcement landscape has transitioned from reactive to predictive.

  • Intent still matters—but data now drives detection.

  • Having policies and procedures in place, together with regularly scheduled audits, is a great starting point.

For those operating in healthcare and federal contracting, the margin for error has narrowed significantly.

  • And the cost of getting it wrong has never been higher.


If you hear that the FBI has been asking questions,

  • If you plead or are found guilty, do you have a Planned Sentence Reduction and Placement Strategy?

v


Footnotes

[1] See, e.g., Woman at center of sprawling Minnesota fraud case gets nearly 42‑year prison sentence (Associated Press, May 21, 2026) (reporting DOJ description of the scheme as the “single largest COVID‑19 fraud scheme in the country”).

[2] U.S. Dep’t of Justice, Civil Division, statement of Assistant Attorney General Brett A. Shumate (Apr. 30, 2026), noting the growing importance of data analytics in identifying fraud. [justice.gov]

[3] U.S. Dep’t of Justice, Civil Division Announces FOCUS Initiative for Data Miners Filing Qui Tam Complaints (Apr. 30, 2026).

[4] See id.; see also discussion of data-miner-driven FCA cases and use of publicly available datasets to identify fraud patterns. [jdsupra.com]

[5] Id. (Statement of Deputy Assistant Attorney General Brenna E. Jenny regarding analytical rigor and fraud detection methodologies. [justice.gov]

[6] U.S. Dep’t of Justice, Fraud Division Launches West Coast Strike Force to Target Health Care Fraud Schemes (Apr. 30, 2026).

[7] Id. (noting that the Strike Force model has led to the prosecution of over 6,200 defendants responsible for more than $45 billion in fraudulent billings). [justice.gov]

[8] Centers for Medicare & Medicaid Services, WISeR (Wasteful and Inappropriate Service Reduction) Model.

[9] Id. (describing use of AI/ML technologies to target services vulnerable to fraud, waste, and abuse and improve payment integrity). [cms.gov]

[10] See discussion of data-miner-driven qui tam filings and growing FCA activity. [jdsupra.com]