IHA Daily Briefing: October 8

IHA Exercise: Taking on AI-Enabled Cyberattacks

Cyberattacks perpetrated by artificial intelligence (AI) occur at unmatched speeds, making them far more destructive than human-led attacks. Automated attacks can achieve initial access to sensitive data systems in under 10 minutes, with 2 minutes the fastest escalation to complete compromise, according to AI security company Wiz.

The 2026 IHA Emergency Preparedness Exercise, "Broken Trust: AI Takes Control," is a key opportunity to safeguard your hospital or health system through lessons learned from testing your plans and response to an AI-enabled attack. Held virtually on Nov. 4, from 9 a.m.-12:30 p.m. CT, the statewide exercise will immerse multidisciplinary teams in an evolving scenario, allowing your team to think through their response to top areas of impact: patient care, workforce stability, communications, cybersecurity and healthcare operations.

Leaders and staff will be challenged to address the manipulation of trusted information; disruption to the healthcare workforce and internal staffing stability; and cascading impacts on clinical and business operations.

A recent IBM survey found that 25% of malicious data breaches are now AI-enabled, costing companies $6 million on average. The time to act is now, as sophisticated, AI-driven incidents are no longer rare occurrences. IHA continues to offer the exercise at a reduced rate so all members can participate. See our program webpage to learn more. Register today.

Staff contact: Keneatha Johnson

TOMORROW: IHA Compliance Webinars Start with Patient Rights

Covering key compliance concerns and common deficiencies, IHA's compliance webinars this fall offer several opportunities to gain new strategies and insights. The first session, "Patient Rights: Understanding Frequently Cited CMS Requirements," is tomorrow, Oct. 9, from 9:30-11:30 a.m. CT. Nationally recognized expert Nancy Ruzicka will lead the session and all other compliance webinars:

Train your staff for one IHA-member fee: $195 per webinar for hospitals and $395 per webinar for health systems. The webinars will be recorded and shared with registrants. Attend to learn the latest on meeting federal requirements from the Centers for Medicare & Medicaid Services (CMS) and enhance patient care. Click on the links above to register for each webinar or webinar series.

Staff contact: Bridget McCarte

CMS Releases Participants in CJR-X Payment Model for Joint Replacement Procedures

The Centers for Medicare & Medicaid Services (CMS) published its list of participants for its mandatory Comprehensive Care for Joint Replacement Expanded Model (CJR-X) focused on lower extremity joint replacement procedures. There are 101 Illinois hospitals on the list. CMS is requesting participating hospitals to complete the online primary point-of-contact form and identify two individuals to serve as their primary points of contact for CJR-X-related communications from the agency. The model, which initially ran in specific geographic areas from 2016-2024, was expanded this year to all acute care hospitals nationwide, except those participating in the Transforming Episode Accountability Model and hospitals located in Maryland. Participation in CJR-X begins Jan. 1, 2028. Click here to access audio from IHA's Aug. 20 webinar, "Preparing for CJR-X: What Hospital Leaders Need to Know." The program, led by leaders with the Forvis Mazars consulting firm, provided an in-depth look into the model and the implications for hospitals that participate.

Medicaid RSV Immunization Coverage Policies

The Illinois Dept. of Healthcare and Family Services (HFS) issued a provider notice informing providers of Medicaid coverage of respiratory syncytial virus (RSV) immunizations. HFS, including Medicaid managed care organizations, will continue to cover the recommended RSV monoclonal antibodies, Beyfortus (nirsevimab) or Enflonsia (clesrovimb), for infants younger than 8 months of age, who are born during or are entering their first RSV season, Oct. 1 through March 31. HFS will also continue to cover the RSV vaccine Abrysvo for pregnant individuals, according to guidelines included in the provider notice. For adult RSV vaccinations, Abrysvo, mResvia, and Arexvy will be covered for all patients aged 75 years and older, for patients aged 50-74 years who are at increased risk for severe RSV disease, and for those aged 18 years and older who are immunocompromised. Prior authorization will not be required for these recommended immunizations.

Illinois Respiratory Disease Surveillance Data

The Infectious Respiratory Disease Surveillance Dashboard from the Illinois Dept. of Public Health (IDPH) provides the latest data on hospital visits, seasonal trends, lab test positivity and demographic data. IDPH also tracks COVID-19, influenza and respiratory syncytial virus information through the Illinois Wastewater Surveillance System dashboard.

Briefly Noted

The Health Resources and Services Administration's (HRSA) Maternal and Child Health Bureau this week released the latest data from the National Survey of Children's Health. The survey provides national- and state-level data on children's physical and mental health, healthcare access and quality, special healthcare needs, adverse childhood experiences, and family and community well-being. HRSA will release a future data brief featuring survey findings specifically focused on the health and well-being of children living in rural communities.

Leading the News