Arizona Attorney General Kris Mayes had accused the Scottsdale-based radiology group of issuing delayed refunds after allegedly using questionable upfront billing practices. 

The U.S. Department of Justice announced four more guilty pleas on Thursday, bringing the total to 12. The scheme involved providers paying kickbacks to patients, all employees of Amtrak, in exchange for billing their insurance for unnecessary medical care. The incidents happened between 2019 and 2022. 

The cyberattack was not discovered until October 2025, and a headcount of the victims is still being conducted. In the meantime, a patient of Sacramento-based One Community Health argues in a lawsuit that the nonprofit health system failed to secure his data, as required by law. The complaint is seeking class action status. 

The cyberattack on Central Maine Healthcare happened in summer 2025, but the investigation was complicated by the hackers having access to systems for several months. A class action lawsuit is pending in state court. 

The American Academy of Pediatrics and co-plaintiffs are tightening the screws in their lawsuit against HHS Secretary Robert F. Kennedy Jr. and other healthcare leaders in the Trump administration.   

The judgment includes $30 million in punitive damages. The lawsuit was brought by Maria Gatchalian, a NICU nurse who said she was fired for reporting patient safety concerns to management. The health system said it intends to appeal the court's decision. 

The U.S. Department of Justice said the defendants, five ophthalmology clinics in Florida, would pay kickbacks to a testing company that performed unnecessary transcranial Doppler ultrasounds. Prosecutors said an investigation into incidents of Medicare and Medicaid fraud stemming from the conspiracy is ongoing.

The health system said it offered a “historic” 21.5% raise as part of a new contract, but it’s been unable to reach an agreement with union officials. Workers are expected to walk off the job starting Jan. 26.