Transformative Health allegedly billed MassHealth for services that weren’t needed and failed to adequately prepare for a data breach.

 

What happened

According to a press release from the Massachusetts Attorney General (AG), the office has finalized a $1 million settlement against former medical transportation provider Transformative Healthcare, LLC and its subsidiaries, which include Lifeline Ambulance Services, Lifeline Healthcare Solutions, Fallon Service, and Fallon Emergency Medical Services.

The settlement resolves allegations that Lifeline and Fallon submitted false claims to MassHealth and its managed care entities for more expensive services than what was provided.

The lawsuit also settled a separate investigation into how Transformative handled a data breach between February 2023 and April 2023. That incident impacted 750,116 individuals.

 

Going deeper

The AG launched an investigation prior to the lawsuit which determined that Fallon and Lifeline allegedly falsely “upcoded” their claims to MassHealth, billing more expensive levels of service, like emergency transportation when it wasn't provided, and false claims for Advanced Life Support when the criteria hadn’t been met. Both of these situations were in violation of MassHealth Regulations.

Although a separate issue, the investigation into the data breach also determined that Transformative “failed to maintain an appropriate written information security program (WISP) as required by the Massachusetts Data Security Regulations” and HIPAA. Data involved in this incident included names, addresses, phone numbers, dates of birth, driver’s license numbers, Social Security numbers, and health/medical information.

 

In the know

MassHealth is the official name for the combined Medicaid and Children’s Health Insurance Program (CHIP). The program reimburses healthcare organizations for services provided to low-income residents or other qualifying individuals.

Complicating the issue is that Transformative Healthcare, a medical transportation company, stopped operations in 2022, and Fallon and Lifeline were both acquired by other organizations in the same year. According to the settlement, Transformative will still be held responsible and will pay the settlement over the course of a five-year period.

 

What was said

Attorney General Campbell said, “Healthcare companies have a responsibility to protect the sensitive patient data they are entrusted with and to bill MassHealth only for the services they provide.” Campbell added that they plan to hold other companies “accountable when they defraud MassHealth and put residents’ personal information at risk.”

 

The big picture

The Massachusetts Attorney General (AGO) has been ramping up efforts to combat fraud in MassHealth. Most recently, in January of 2026, the AGO reached a $515,000 settlement with Comstar, LLC, an ambulance billing provider, for failing to safeguard patient information following a 2022 data breach. In August of 2025, the AGO announced a $6 million settlement with two ambulance companies that were also accused of submitting false claims for more expensive services.

These two settlements, alongside the one with Transformative, show that the office is enforcing HIPAA and their own state privacy laws. Both of these settlements are outside of potential lawsuits that patients may have started on their own In fact, Transformative Healthcare was hit with a separate lawsuit in 2024, Durgin v. Transformative Healthcare, LLC et al, which is currently in a waiting period following a merge to a master lawsuit, Hicks v. Coastal Medical Transportation Systems, LLC.

 

FAQs

What is a WISP plan and do other states require it?

A WISP is a plan for organizations to identify and assess reasonably foreseeable security risks. Following assessment, the plan outlines how organizations can evaluate and improve the effectiveness of existing safeguards, including proper employee training. Many other states require similar plans, including New York, California, Texas, and others, but the specifics of the plans can vary and non-compliance is a state, rather than a federal, issue.

 

Will reaching a settlement with the government protect organizations from class action suits?

No. Class action suits and actions from the government are separate matters. An organization may face a class action lawsuit, but no other penalties, or a government lawsuit with no class action suit.