Why HRSA is Targeting High-Cost Infusion Drugs in 2026
Every 340B compliance officer knows the call: “HRSA wants to see your epoetin alfa and ATG vials.” That’s how one audit opened at a Midwest transplant center earlier this year. The auditor skipped the outpatient pharmacy, ignored contract pharmacy shipments, and headed straight to the infusion center fridge. Across the country, HRSA’s 2025‑2026 audit trend reports show hematology and transplant infusion drugs account for well over 60% of 340B audit findings tied to diversion or duplicate discounts. The reason’s plain enough: one mis‑tagged dose of letermovir or defibrotide can mean tens of thousands in repayment risk.
HRSA’s Office of Pharmacy Affairs isn’t guessing. Auditors now pull purchase data from wholesalers down to lot and invoice detail using the expanded data‑matching protocol launched late 2025. They flag vials that show up as both 340B and GPO in the same month, or drugs logged to an ineligible encounter ID. For hematology and solid organ transplant centers, that’s the compliance minefield of 2026, wide, detailed, and unforgiving.
The Practical Reality of Tracking Drug Ownership in Infusion Settings
Most covered entities still rely on a virtual 340B inventory model that works well in outpatient pharmacy operations. It blurs the line between 340B and WAC cost centers through software‑based replenishment logic. That logic cracks in mixed‑use drugs like belatacept, ruxolitinib, or IVIG. In these programs, the same drug may shift from outpatient infusion to inpatient transplant or research protocol within days. Every movement redefines eligibility under the 340B statute and HRSA’s interpretation of “patient.”
HRSA’s 2025 audit guidance, the first major overhaul since 2019, tells auditors to test “point‑in‑time locus of administration.” Translation: documentation must prove not only prescriber relationship, but that the drug was ordered, mixed, and infused during an eligible encounter. A clinic charge slip? Not enough. The infusion record needs to show the department code tied to a reimbursable outpatient cost center, and the medical record must be accessible within HRSA’s audit window. If the patient was under observation, the entity must document clear segregation in cost reporting. There’s no grace if these distinctions blur.
When HRSA deems a dose ineligible, it demands repayment by NDC instead of by patient. That shift changes the operational risk calculus. Covered entities must trace infusion drugs at the NDC level across mixed‑use inventories, and unless their EMR feeds directly into the split‑billing system, automated capture is rare. Manual logs no longer survive that kind of audit. Not in 2026.
Building an Audit-Proof Inventory Control for Complex Infusion Drugs
The starting point is live ownership visibility. Not a bigger spreadsheet, visibility. Every vial of rituximab or alemtuzumab must be traceable to three things: who received it, which account (340B, GPO, WAC) funded the purchase, and whether the encounter met HRSA’s patient definition. Miss one, and an audit becomes guesswork.
One transplant hospital I supported in late 2025 learned this the hard way. Their infusion suite tagged antithymocyte globulin purchases as 340B based on outpatient classification, but HRSA found the patients were formally admitted before infusion. The hospital had discharge records within 24 hours but cost reporting still labeled the use inpatient. HRSA called it ineligible, and sought over $300,000 in repayment. The real flaw wasn’t intent. It was timing. The admission order flipped after scheduling but before infusion. HRSA doesn’t care about nuance; it cares about alignment.
Automated reconciliation tools must now sync continuously with admission‑discharge and cost center data. Vendors like Macro Helix, eRx340B, and Sentry released mid‑2026 patches to track that alignment, but those updates only work when internal data governance is solid. If registration teams can’t tell observation from inpatient cost centers, no software rescue is coming.
Policy Direction and What Covered Entities Should Brace For
HRSA isn’t out on an island here. The 2025 OIG report on “340B Oversight of Hospital Outpatient Departments” highlighted high‑cost infusion biologics as a systemic control gap. Manufacturers echoed the concern in congressional comments. Amgen, Bristol Myers Squibb, and Novartis have all cited diversion risk in 340B ESP submissions to justify contract pharmacy limits, arguing infusion centers lack auditability. HRSA hasn’t stripped coverage from those sites, but in audits, it’s applying the same precision those manufacturers demanded. Hence the obsession with individualized infusion records, physician attribution, and EMR access logs during site visits.
In audits, a recurring issue now centers on alignment between OPPS claims and 340B charge allocations. HRSA compares UB‑04 claim files against 340B accumulation data. If a claim includes a J‑code marked with a 340B modifier, auditors expect to match that vial to a 340B‑eligible encounter. If the modifier’s missing, the purchase is suspect. Simple as that. Double‑check your split‑billing interface, HRSA has cited dropped modifiers in over twenty audits since the end of 2025.
What remains unchanged: the entire burden sits with the covered entity. No de minimis threshold. No mulligans for after‑the‑fact corrections. Once an ineligible dose is infused, repayment follows. The only workable defense is proactive self‑auditing. Pull transaction histories, tie them to encounter types, fix what needs fixing before HRSA looks. Or they’ll fix it for you.
What a 2026-Ready 340B Compliance Guide Should Actually Deliver
A serious 340B compliance guide for hematology and transplant drugs in 2026 shouldn’t read like a binder. It should read like a playbook, clear, practical, tested. Start with mapping each high‑cost drug’s supply chain: wholesaler accounts, split‑billing policy, EMR linkages, cost center ownership. Set encounter validation rules that mirror HRSA’s tests. And train infusion pharmacists and nurses why encounter status matters. They often determine eligibility with a single click.
Include an internal audit plan that can replicate HRSA’s standard data request within 72 hours: invoices, accumulations, administration records, cost report tie‑outs, payer files. If you can’t assemble that packet on demand, you’re not ready. HRSA shortened its 2026 response window to fifteen business days. They’re not bluffing when they close findings based on incomplete submission.
Hematology‑Oncology and transplant programs operate at the crossroads of the highest dollar drugs and the tightest 340B rules. Treating them like ordinary outpatient departments, that’s what keeps getting hospitals written up. The programs that survive audits are the ones treating every rituximab vial like a controlled substance. That’s the discipline HRSA expects in 2026. Look, if you’re not tracking ownership at that level by now, you already know where the story’s heading.