I need advice urgently! We have discovered today that a coding contractor, who we have had for 6 months, is on the OIG Excluded List. We performed an exclusion check yesterday during an audit and the contractor's name came up. Two months ago, the contractor was placed on the OIG Excluded List for a previous incident at another facility. What are our potential liability risks? We have already billed Medicare for services the contractor provided. Should we self-disclose or consult with a lawyer before self-disclosing? I am feeling extremely stressed.