Health Net Federal Services, LLC and Centene Corporation Agree to Pay Over $11 Million to Resolve False Claims Act Liability for Cybersecurity Violations

The Department of Justice announced a $11.25M settlement with Health Net Federal Services and Centene to resolve allegations that HNFS falsely certified compliance with DoD cybersecurity requirements while administering TRICARE from 2015–2018, including failures in timely vulnerability scanning, patch management, asset management, access controls, configuration settings, firewalls, handling end-of-life systems, and password policies; the announcement emphasizes the importance of safeguarding sensitive government and servicemember data, notes involvement from multiple DoD oversight entities, and states there has been no determination of liability.