You are head of the compliance committee of the Covington Hospital. At a social dinner the night before the quarterly committee meeting, the chief compliance officer tells you in confidence that she has heard that a glitch in the hospital’s billing software has resulted in the hospital being overpaid by several million dollars in Medicaid reimbursements. “I hear rumors like this all the time,” she says, “and if nothing more substantial comes to our attention our policy is to let them go.” You know that if the report is true, having to repay the overcharges and penalties could drive the hospital into bankruptcy. The next day, at the committee meeting, you see nothing in the chief compliance officer’s report addressing the possible Medicaid overcharges. What should you do?