When Oversight Fails: Iowa's $22 Million Contract Pharmacy Scandal and the Structural Fragility of ADAP Financing
On March 6, 2026, the Iowa Department of Health and Human Services filed a nine-page complaint in Polk County District Court alleging that NuCara Specialty Pharmacy failed to remit more than $22 million in 340B program income generated through the state's AIDS Drug Assistance Program (ADAP). According to the filing, NuCara missed eight months of required monthly payments between October 2024 and January 2026, then used those funds to pay unrelated creditors. Iowa terminated the contract the same day it sued. Three days later, on March 9, the state implemented an ADAP waiting list of 1,106 people, the first such waitlist reported to NASTAD in more than a decade.
The Iowa story differs in important ways from Florida's earlier ADAP crisis. Florida's eligibility cuts and formulary restrictions were political choices made under questionable budget claims and without stakeholder engagement. Iowa's failure is structural: a single contract pharmacy relationship spanning 28 years, an oversight architecture incapable of detecting eight months of missed payments in real time, and a federal financing model that has quietly become majority-dependent on rebate revenue states cannot reliably audit. Both crises produce the same outcome for people living with HIV, but they require different policy responses, and conflating them obscures the specific reforms Iowa now demands.
How the Money Was Supposed to Work
The mechanics matter, because they explain the scope of the loss. Under Iowa's contract with NuCara, the pharmacy ordered medications on behalf of the state at the 340B discounted ceiling price. When clients had third-party insurance, NuCara billed insurers at the standard, non-discounted rate, generating "program income" from the spread. NuCara was permitted to retain a $75 dispensing fee per claim and was required to remit the remaining program income to Iowa HHS each month for reinvestment in the program. The lawsuit alleges that NuCara instead "improperly used those 340B savings to pay other creditors" and "no longer has the capital necessary to pay Iowa HHS the program income required under the Contract." A pending acquisition by OneroRX offers no relief; according to the state, OneroRX does not intend to assume NuCara's liabilities.
Iowa's structural exposure to this kind of failure was unusually concentrated. According to NASTAD's 2025 RWHAP Part B ADAP Monitoring Project Annual Report, Iowa's total FY2023 ADAP budget was $12,996,461, with the federal ADAP Earmark contributing just $1,917,626. ADAP rebates allocated to the broader Part B program reached $12,070,445 in FY2023, up from $7,098,397 in FY2022, a 70% year-over-year increase in rebate dependency. Iowa's recorded state general revenue contribution to ADAP was $0. When NuCara stopped remitting program income, Iowa's ADAP had no state-funded redundancy to absorb the loss. The $22 million now in dispute exceeds Iowa's entire FY2023 ADAP budget.
This concentration is not Iowa's alone. Drug rebates generated through 340B now constitute 52% of total ADAP budgets nationally, with the federal ADAP earmark covering only 29%. Federal ADAP appropriations have remained flat in nominal dollars since FY2014, meaning purchasing power has declined 31% since 2005. The rebate-and-program-income revenue stream has quietly become load-bearing infrastructure for HIV treatment access in this country, and Iowa just demonstrated what happens when that infrastructure has a single point of failure.
The Oversight Vacuum
The federal architecture was not designed to detect this kind of contract pharmacy failure quickly, and Government Accountability Office (GAO) testimony delivered to the Senate HELP Committee in October 2025 had already laid out why. Director Michelle Rosenberg's statement documented that HRSA has implemented only five of 20 GAO recommendations to improve 340B oversight, with 15 remaining unaddressed. The agency does not require covered entities to register contract pharmacies for each individual site, leaving HRSA without complete data on contract pharmacy arrangements nationally. HRSA's guidance to covered entities "lacks specificity as it relates to the scope and frequency" of contract pharmacy oversight, and GAO found that some covered entities "performed minimal contract pharmacy oversight" as a result.
The audit footprint is also vanishingly small relative to program scale. HRSA conducts roughly 200 audits of covered entities per year against a covered entity site footprint that grew from about 20,000 in 2013 to more than 55,000 by 2023. HRSA has told Congress repeatedly, across more than a decade of budget requests, that it lacks the regulatory authority to enforce many of the recommendations GAO has flagged. Iowa was operating within a federal oversight system that GAO itself has documented as insufficient. The eight-month detection lag was not surprising. It was predictable.
A Legislator, a Bill, and a Conflict of Interest
The Iowa case carries a political dimension worth naming directly. Iowa Rep. Brett Barker (R) has served as NuCara's vice president of operations since 2012. He also served on the Iowa Board of Pharmacy from May 2017 to December 2021. In January 2026, weeks before the lawsuit was filed, Barker introduced legislation that would prohibit drug manufacturers from restricting the delivery of 340B discounted drugs to contract pharmacies, a policy change that would directly benefit contract pharmacy financial interests including NuCara's. Barker has stated he had no operational knowledge of the matters in the lawsuit and that they involved "departments and actions entirely separate from my work."
Whether Barker had operational knowledge is a question for the litigation. The structural concern for advocates and policymakers is broader and material regardless of how the case resolves: contract pharmacy interests have direct legislative representation in Iowa, the patient-facing safeguards on 340B revenue do not, and the state has no disclosure framework that surfaces this kind of conflict before legislation moves. This pattern is replicated in many statehouses, and it shapes which 340B reforms gain traction and which stall.
Why This Matters Beyond Iowa
The April 2026 ADAP Watch places the Iowa scandal within a system already under enormous and mounting pressure. Nineteen ADAPs report a budget deficit for the current Ryan White HIV/AIDS Program (RWHAP) Part B fiscal year ending March 31, 2027, with Iowa among the nine reporting significant deficits of 5% or greater. Two ADAPs now have active waiting lists (Iowa at 1,106 and Utah at 10), two operate under maximum client caps, and KFF analysis published March 2 documents that 18 states have already adopted cost-cutting changes to ADAPs with five more considering them. The top reported drivers of these deficits include rising per-client drug costs, increasing premium costs, expiration of enhanced premium tax credits, increased client enrollment, and decreased 340B rebate revenue.
The demand pressure is also accelerating. The post-COVID Medicaid unwinding pushed a 30% increase in new ADAP enrollments and an 11% increase in total enrollment compared to 2022. H.R. 1, signed July 4, 2025, is projected to drive an additional surge as more than 10.3 million people lose Medicaid. Iowa's experience is the warning shot. As demand surges and rebate revenue compresses simultaneously, more states are one operational failure away from a waitlist of their own.
What Reform Should Look Like
The temptation in moments like this is to treat the Iowa scandal as a contracting failure, fix the contract, and move on. That response misses the systemic risk the case exposes. Reform needs to address the federal oversight architecture, the state-level operational gaps, and the conflict-of-interest framework that lets contract pharmacy financial interests shape 340B legislation without disclosure. We should be specific about what each level of government should do.
At the federal level, Congress should grant HRSA explicit rulemaking authority over the 340B program. The agency has requested this authority for more than a decade, and the absence of it is the proximate reason 15 of 20 GAO recommendations remain unimplemented. Rulemaking authority should include the power to require site-level contract pharmacy registration, mandatory program income reporting from contract pharmacies serving covered entities, and enforceable corrective action plans following audits. Congress should also increase the federal ADAP earmark to reflect documented enrollment growth and reduce the structural overdependence on rebate revenue that now constitutes 52% of total ADAP budgets. A safety net program majority-funded by a revenue source no federal agency reliably tracks is a safety net engineered for this kind of failure.
At the state level, ADAPs should require monthly attestation and independent audit of contract pharmacy program income remittance. An eight-month detection lag is unacceptable when the funds at stake support life-sustaining medication for people living with HIV. State health departments should also reassess single-vendor dependencies. Iowa's 28-year relationship with NuCara is not unusual in ADAP procurement practice, but the Iowa case demonstrates that contract longevity is not a substitute for ongoing operational scrutiny. Where feasible, ADAPs should diversify contract pharmacy arrangements to eliminate single points of failure, and HRSA's HIV/AIDS Bureau should issue updated guidance encouraging this practice.
State legislatures should adopt conflict-of-interest disclosure requirements for legislators with operational or executive roles at 340B covered entities, contract pharmacies, or third-party administrators. The Iowa case illustrates why this matters. Contract pharmacy interests routinely shape state-level 340B legislation, and patients have no comparable seat at the table. Disclosure does not resolve the underlying tension, but it surfaces it for voters, advocates, and other legislators in time to inform debate.
Patient advocates should also continue pressing for a clear federal definition of "patient benefit" tied to reporting requirements, as CANN's 340B Policy Director has argued in prior analysis. The 340B program was designed to stretch federal resources to reach more eligible patients, not to function as an opaque revenue stream for intermediaries. The recently introduced ACCESS Act and the SUSTAIN 340B discussion draft offer frameworks worth pressure-testing in Congress, and the Iowa case provides a concrete example of why federal standards cannot wait.
The Patient Stake
The 1,106 Iowans now on an ADAP waiting list did not create this failure. They did not negotiate a 28-year single-vendor contract, did not write the federal statute that left HRSA without enforcement authority, and did not introduce legislation that would expand the financial interests of the company that allegedly mishandled their program income. They are simply trying to access HIV treatment, and the architecture built to support that access has now demonstrated a failure mode that other states are structurally exposed to.
The Ending the HIV Epidemic initiative depends on sustained viral suppression, which depends on consistent treatment access, which depends on programs like Iowa's remaining solvent and operationally sound. The reforms outlined here are not abstract. They are the conditions under which a national strategy launched in 2019 can actually succeed. We have the data, we have the GAO recommendations, and we now have a $22 million case study showing what happens when those recommendations sit on a shelf. What we need is the political will to act before more patients find themselves without medication and sitting on a waiting list, praying for someone to do the right thing.
