Utah DHHS Left $49.2M in Drug Rebates Uncollected for Years
Summary
A December 8, 2025 Utah State Auditor interim management letter (Report No. 25-13) found the Department of Health and Human Services failed to invoice drug manufacturers for an estimated $49.2 million in Medicaid pharmacy rebates -- $23.2 million of it from fiscal year 2025 alone -- after a 2023 claims-system migration broke the data pipeline that generates those invoices. DHHS says in a May 14, 2026 announcement that it has since recovered $36 million of the total and expects the rest by the end of 2026. The same report also found DHHS in a third straight year of missing federally required nursing-facility health and safety surveys, though the noncompliance rate has been falling.
A system migration broke the rebate pipeline for two and a half years
Federal law requires the Department of Health and Human Services (DHHS)⧉ to report drug utilization data to manufacturers and invoice them for rebates within 60 days of each calendar quarter -- money manufacturers owe under the Medicaid Drug Rebate Program. In April 2023, DHHS switched to a new Medicaid claims system called PRISM. The migration broke the data interface between PRISM and DHHS's third-party rebate-processing vendor, so the vendor could no longer report complete drug-utilization data or send manufacturers invoices for a portion of the program -- medical claim rebates specifically.
The result, the Office of the Utah State Auditor⧉ found in a December 8, 2025 interim management letter (Report No. 25-13), is an estimated $49.2 million in pharmacy rebates manufacturers owe DHHS in aggregate since the migration -- $23.2 million of it accrued in fiscal year 2025 alone, meaning the other $26 million had already piled up before the audited year even began. This is the second year running DHHS has been cited for the same underlying gap; the finding carries forward last year's Single Audit finding number.
View data as table
| Missed since the 2023 PRISM rollout (total) | 49,200,000 | |
|---|---|---|
| Of that, FY2025 alone | 23,200,000 | A subset of the total at left, not an additional amount -- the other $26 million had already accrued before FY2025 began. |
| Recovered by May 2026, per DHHS | 36,000,000 | DHHS's own self-reported recovery figure, not a re-audit. |
DHHS says it's most of the way to collecting everything it's owed
DHHS's fix for the broken interface -- the piece that stops the bleeding -- went live the week of November 17, 2025⧉, more than two and a half years after the migration first broke it. rules meant DHHS could not send manufacturers the backlog invoices until February 2026⧉, and manufacturers now have a 60-day window to dispute⧉ any of those claims. By its own account in a May 14, 2026 announcement⧉, DHHS says it has recouped $36 million of the total across 10 quarters of back rebates, and expects the remaining roughly $13.2 million by the end of 2026.
"Our priority is to be a faithful steward of the funds provided by Utah taxpayers," Utah Medicaid director Julie Ewing said in the announcement⧉, citing a new monthly oversight cycle with the department's vendors. DHHS attributes part of the original delay to staffing turnover and the nationwide Change Healthcare pharmacy-system outage⧉, on top of the PRISM interface error.
The same report found a smaller, related lapse: DHHS's own policy calls for charging interest on any pharmacy rebate invoice manufacturers pay more than 38 days late, but auditors found two of 17 sampled late invoices went un-charged⧉ -- one ten days over, one thirty-five.
A third straight year of missed health and safety surveys
The rebate finding isn't the only multi-year pattern the same report documents. Federal rules require DHHS to inspect nursing and intermediate care facilities for health and safety at least every 15 months⧉, and to keep the statewide average interval at 12 months or under. Auditors have flagged Utah for missing that timeline every year since fiscal year 2023.
View data as table
| FY2023 | 85.7% | 12 of 14 sampled facilities overdue, by 3.63-17.1 months. |
|---|---|---|
| FY2024 | 68.8% | 11 of 16 sampled facilities overdue, by 3.97-12.23 months. |
| FY2025 | 57.1% | 8 of 14 sampled facilities overdue, by 0.57-7.6 months. |
DHHS has narrowed the gap -- a dedicated survey team, a 43% licensing-fee increase that funded new hires, and other staffing changes helped it recertify 51 facilities in fiscal year 2025, up from 31 in fiscal year 2024⧉ -- but auditors call the FY2025 noncompliance rate of 57.14% still "considered high"⧉.
- DHHS agreed with every recommendation in the report, including resolving the PRISM interface issue, invoicing and collecting the unbilled rebates, and consistently charging interest on late payments going forward.
- The rebate recovery figures are DHHS's own self-reported update, not a re-audit; the report notes DHHS continues to work with the Auditor's office on the recovery effort.
- Auditors caution this was an interim letter based on procedures performed through October 2, 2025, for a Single Audit that was not yet complete -- additional DHHS findings may follow in a later report covering the same fiscal year.
- The health and safety survey backlog traces partly to COVID-19 Public Health Emergency-era relaxed requirements, auditors note, though the FY2025 noncompliance rate remains above the federal standard three years after DHHS was first flagged for it.
This review covers DHHS's Medicaid Assistance, Social Services Block, and Substance Use Prevention Treatment and Recovery programs for the year ended June 30, 2025, based on audit procedures performed through October 2, 2025 -- the final internal-control and compliance reports for the full statewide Single Audit will be issued under separate cover and may include additional findings. The recovery figures describing DHHS's progress since the report are the department's own account, published in a May 14, 2026 announcement, not an auditor-verified update.
Sources(2) ▾
- Office of the Utah State Auditor, Department of Health and Human Services -- Interim Management Letter (Report No. 25-13) (2025-12-08) — The full 13-page interim management letter, part of the state of Utah's FY2025 statewide Single Audit of DHHS's Medicaid Assistance, Social Services Block, and Substance Use Prevention Treatment and Recovery Services programs. Fetched directly as a PDF and converted to text via pdftotext -layout for page-level citation. Source for every pharmacy-rebate figure ($49.2M aggregate / $23.2M FY2025), the PRISM interface-failure narrative, the interest-policy lapse (Finding 7), and the three-year health-and-safety-survey noncompliance table (Finding 2). Sealed to BlackLeaf's own document store at read time -- the reporting.auditor.utah.gov delivery URL serves a broken TLS intermediate certificate chain that Node's fetch() and Wayback's Save Page Now both reject (curl with -k and ordinary browsers tolerate it via AIA-chasing); one Save Page Now probe for this exact URL returned an HTTP 520 at read time, consistent with the known intermittent SPN outage, so the capture below is the sealed copy only. reporting.auditor.utah.gov · original document
- Utah Department of Health and Human Services, Utah DHHS Recoups More Than $36 Million in Medicaid Drug Rebates (2026-05-14) — DHHS's own announcement, published on its featured-news page five months after Report No. 25-13, providing a post-report update on the rebate recovery effort: the $36 million collected to date, the 10-quarters-of-rebates detail, the invoicing and collection timeline, and Utah Medicaid director Julie Ewing's on-the-record statement. Fetched directly and sealed to BlackLeaf's own document store at read time; one Wayback Save Page Now probe returned an HTTP 520 (same intermittent outage as above), so the capture is the sealed copy. Used only to source DHHS's self-reported recovery progress -- it does not modify or stand in for the Auditor's own $49.2M/$23.2M findings, which come solely from doc-ut-osa-25-13. dhhs.utah.gov · original document
Comments
Always open. Logged-in readers can annotate paragraphs in place.
A Utah State Auditor review finds the state's health department failed to invoice drug manufacturers for $49.2 million⧉ in Medicaid pharmacy rebates since a 2023 claims-system migration broke the data pipeline that generates those bills -- with $23.2 million of that gap accruing in fiscal year 2025 alone. The department says it has since recovered $36 million of the total, per its own May 2026 announcement⧉.