Tower’s Jesse Shade Warns of Cyberattacks During COVID-19 and Tells How to Mitigate Them

May 15, 2020

ominous figure embedded in coding to illustrate cybersecurity threats

When Tower held its cybersecurity webinar in February, presenters stressed that cyberattacks increase dramatically during a crisis. This certainly holds true for COVID-19. Attacks soared by 330% in its early weeks, according to an Atlas VPN report.

Workers’ compensation payers, third-party administrators, ancillary care providers, and MSP compliance companies pose very attractive targets – regardless of the size of the company.  

They store, manage, and transfer large volumes of protected health information (PHI), which is quite valuable to criminals.

In this WorkCompWire article, our Senior Vice President of Information Technology, Jesse Shade, explains how cyberattacks occur and describes security measures to protect networks, systems, and data.

During the work-from-home transition, experienced IT pros deployed VPNs to connect remote machines to enterprise networks and installed the latest and greatest security software.

However, if a company can buy antivirus and antimalware software off the shelf or online, so can criminals. And, they analyze these products and create ways to work-around their security  capabilities.

Threat actors can even enter a network undetected and stay there for months and learn how to circumvent its security measures. Jesse recommends proactive solutions to prevent breaches in this timely story.

The Penalties are Coming

April 6, 2020

graphic of dollar signs with the word panalties overlaid

The Penalties Are Coming

With COVID-19, it’s understandable if Civil Monetary Penalties (CMPs) have slipped your mind.  CMS has proposed stiff penalties—up to $1,000 per day per claimant—for incorrect MSP reporting or failure to report. (Our Chief Compliance Officer Dan Anders posted on these in February.) For a well-written synopsis of how they could affect you, read this article by Michael Stack, CEO of AMAXX, LLC: Increased Penalties are Coming for Incorrect Medicare Secondary Payer Reporting.

CMS’s Revised Consent to Release Form Becomes Mandatory April 1

March 18, 2020

illustration of Revised Consent to Release form signing

As of April 1, 2020, submissions of Workers’ Compensation Medicare Set-Asides (WCMSAs) must include CMS’s revised Consent to Release form.  The form indicates that the need and process for the WCMSA have been explained to the injured worker, and that the injured worker has approved the contents of the submission, including the allocated funds.

First announced with the release of an updated WCMSA Reference Guide on October 10, 2019 (Version 3.0), the revised consent must include the following language:

Further, I have had the Workers’ Compensation Medicare Set-Aside Arrangement need and process explained to me, and I approve of the contents of the submission.

Beneficiary Initials: ____

A copy of the revised consent to release can be found here.

Practical Implications

If the claimant is represented by an attorney, the attorney will typically explain why an MSA is needed in settlement of their WC case.  If not represented, this responsibility may fall to the adjuster or defense attorney.

CMS provides resources to assist with the MSA explanation in both the WCMSA Reference Guide and the Self-Administration Toolkit.  Additionally, for professionally administered MSAs, our partner Ametros provides general information as well as individual consultation to walk the injured worker through how the MSA will work post-settlement.

As mentioned above, the revised consent requires the claimant to approve the contents of the MSA submission.  While a review of the MSA report alone by the claimant or their attorney may be enough to obtain the beneficiary’s approval, if the injured worker requires additional documentation prior to their approval, Tower will provide it.

Finally, keep in mind, consent without the revised Consent to Release language will no longer be valid as of April 1.  Consequently, Tower may provide a revised consent form to be executed by the claimant prior to submission or resubmission of the MSA to CMS.

If you have any questions please contact Tower’s Chief Compliance Officer, Dan Anders, at (888) 331-4941 or daniel.anders@towermsa.com.

Meloxicam’s Price Drop – Good News for MSAs

March 16, 2020

Prescription drug bottle to illustrate Meloxican's price drop

Our Chief Compliance Officer Dan Anders’ blog post on the huge price drop of Meloxicam prompted a WorkCompCentral article, quoting Dan.  Previously priced at $4.25 per pill for 15 milligrams, it’s now 5 cents per pill.  Over a 20-year life expectancy of an injured worker taking 15 milligrams a day, the old price meant an MSA allocation of $30,000. With the reduced price, that allocation would be $300.  For details, see http://bit.ly/2IHjYwn (subscription required).

Tower’s Dan Anders Comments on NY Ban on Hold-Harmless Clauses in Settlement Agreements

March 6, 2020

Dan Anders who was quoted in the Claims Journal

New York Workers’ Compensation Board recently issued a bulletin indicating it will not approve settlements requiring injured workers to indemnify or hold insurers harmless if Medicare demands future reimbursements. Tower’s Chief Compliance Officer Dan Anders said the board may be responding to a growing trend of MSAs and settlements that are not submitted to Medicare for review. See WorkCompCentral’s coverage here (subscription required)

Business Insurance: Insurers could face stiff MSP penalties

March 3, 2020

bullhorn illustration alerting you to avoid reporting penalties

Business Insurance’s Angela Childers examined CMS’s proposed rules for Section 111 Mandatory Insurer Reporting penalties in this Feb. 26 article.  She quoted Tower’s Chief Compliance Officer Dan Anders on the severity of the possible $1,000 per-day-per-claim penalty for not reporting MSP data or not reporting it with sufficient accuracy. You don’t want to face a $365,000 or more penalty. See Dan’s post for proposal details and contact him at Daniel.anders@towermsa.com for direction on how to submit comments and prepare for the impending penalties.

Cybersecurity Threats & You

ominous figure embedded in coding to illustrate cybersecurity threats

Many businesses don’t think a data breach will happen to them; small businesses especially assume they’re too small to attack. However, Tower’s Feb. 19 cybersecurity webinar featured a survey that showed that 11% of very small businesses and 44% of midsized organizations experienced a data breach in the last 12 months.  A quarter of these companies had to file for bankruptcy, 10% went out of business entirely. See Nancy Grover’s excellent coverage of the webinar for workerscompensation.com.  And, you can watch the webinar at Tower’s webinar.

Tower to Speak at WCI

February 17, 2020

Workers' Compensation Institute (WV+CI) logo

WCI notified Tower MSA Partners that our proposal on Managing CAT Claims was accepted for the National Trends track at the 2020 conference (August 16-19).  The session will present strategies for managing and settling complicated, high-cost catastrophic claims.  Using case studies, a panel of experts examine key decisions that led to positive outcomes. While not all catastrophic claims settle, with the right strategies, resources and partners, many that haven’t, could. Plan to attend! #WCI2020.

Tower’s Dan Anders is New NAMSAP VP

February 7, 2020

Dan Anders who was quoted in the Claims Journal

The National Alliance of Medicare Set-Aside Professionals (NAMSAP) has announced its 2020 Board of Directors, including our Chief Compliance Officer Dan Anders, who was elected by the board as Vice President. Dan will work closely with NAMSAP President Ciara Koba of Gordon Rees and other board members to continue their effective dialog with CMS on a range of MSP compliance matters.  In addition to serving as Vice President, Dan is co-chair of the Policy & Legislative Committee which reviews and provides recommendations to the board concerning proposed MSP legislation and CMS policy.

For details, see the article in WorkCompWire.