October 26, 2026
The Department of Justice (“DOJ”) recently announced a $315 million settlement with CVS resolving allegations that CVS knowingly filled prescriptions for opioids and other controlled substances in violation of the Controlled Substances Act (“CSA”). The CSA prohibits pharmacies from knowingly filling prescriptions that lack a legitimate medical purpose, including unjustified opioid quantities, early refills consistent with drug abuse, or dangerous drug combinations.
Pharmacies are often an important buffer between unscrupulous prescribers and the public. As such, under the CSA, a valid prescription alone is not enough for a pharmacy to lawfully dispense controlled substances. Pharmacists share responsibility for ensuring prescriptions serve a legitimate medical purpose and can face civil penalties for knowingly filling prescriptions that do not.
According to DOJ, CVS’s illegal conduct included filling prescriptions for excessive quantities of opioids, prescriptions from known “pill mill” prescribers (doctors who issue large volumes of controlled-substance prescriptions without a legitimate medical purpose), and so-called “trinity prescriptions.” Trinity prescriptions combine an opioid, a benzodiazepine, and a muscle relaxant, creating a cocktail that increases the risk of dependency and fatal overdose.
How did DOJ establish that CVS acted knowingly under the CSA, rather than simply failing to identify suspicious prescriptions? Because the government got an inside look at CVS’s operations with the help of a whistleblower.
According to whistleblower Hillary Estright’s Second Amended Complaint, CVS repeatedly ignored warnings from its own pharmacists about potentially unlawful prescriptions. Estright, a former CVS pharmacy manager, repeatedly reported suspicious prescribers to her manager. In one instance, Estright reported a doctor who prescribed Percocet to a patient with no prior opioid use for a mild sunburn. Rather than address her concerns, her district manager allegedly pressured her to take on more opioid patients to increase the pharmacy’s prescription volume.
Estright’s pushback ultimately cost her her job. After she resisted pressure to accept more opioid patients, her district manager allegedly fired her under pretextual reasons. Having raised her concerns internally to no avail, Estright filed a qui tam lawsuit in 2019. Her experience illustrates the difficult position many whistleblowers face: nobody starts a job intending to become a whistleblower, but when employers repeatedly ignore warnings and retaliate for speaking up, turning to the government may be the only option left.
Ultimately, Estright’s suspicion that the practices she witnessed were not limited to her Tennessee pharmacy appears well founded. After investigating her allegations, DOJ intervened and filed its own complaint, alleging that these practices were not isolated incidents but the product of corporate policies that prioritized prescription volume and profits over patient safety.
For example, DOJ alleged that CVS abandoned a proposed safety checklist for high-risk opioid prescriptions after estimating that implementing it nationwide would cost approximately $11 million in additional labor expenses. Additionally, between 2014 and 2017, CVS employees in Texas escalated concerns about one physician to the company’s compliance department 13 separate times. Those warnings included reports that the physician had written controlled substance prescriptions for a patient who had already died. Although CVS compliance personnel eventually recommended blocking his prescriptions, a CVS medical director allegedly overruled that recommendation, allowing CVS to continue filling prescriptions.
Crucially, DOJ alleged that CVS billed federal healthcare programs for many of these unlawful prescriptions. This provided the government with a basis for pursuing CVS under the False Claims Act (“FCA”). Of the $315 million settlement, $126 million resolved the CSA allegations, while $189 million resolved the FCA allegations. As the whistleblower, Estright is eligible to recover between 15 -25 percent of the $189 million FCA settlement.
Corporations, like people, respond to incentives. After a $315 million settlement, the $11 million safety checklist CVS allegedly rejected may look like a bargain.
As the U.S. continues to struggle with the opioid epidemic, whistleblowers will play a crucial role in saving lives by exposing similar illegal conduct. In her complaint, Estright identified several red flags that may indicate unlawful prescribing or dispensing under the Controlled Substances Act (CSA):
If you work for a business that prescribes or dispenses controlled substances and you believe your employer is ignoring these red flags while billing government healthcare programs, contact us for a confidential conversation.