A CCN, or CMS Certification Number, is a unique identifier that the Centers for Medicare & Medicaid Services (CMS) assigns to every healthcare facility that participates in the Medicare or Medicaid programs. Think of it as a facility’s federal ID badge: it tells CMS which state the provider operates in, what type of facility it is, and whether it has met the federal conditions required to treat patients covered by government insurance. The number itself is compact, but it encodes a surprising amount of information about a provider, and it shows up in billing, regulatory oversight, quality reporting, and public datasets that researchers and patients rely on.
How a CCN Is Structured
A CCN is six characters long. The first two characters represent the state (or territory) where the facility is located, using a numeric code CMS assigns to each state. For example, facilities in California start with a different two-digit prefix than those in New York or Texas. If a hospital relocates across state lines, its CCN changes because that prefix is tied to geography, not to the organization itself.
The remaining four characters tell you what kind of facility it is and distinguish it from other facilities of the same type in that state. CMS uses specific numeric ranges in those last four digits to indicate provider type. Short-term acute care hospitals fall within one range, psychiatric hospitals in another, rehabilitation facilities in yet another, skilled nursing facilities in their own block, and so on. Someone familiar with the numbering scheme can glance at a CCN and immediately know whether they are looking at a general hospital, a long-term care facility, or a home health agency. This built-in classification is one of the features that makes the CCN useful for regulators and researchers, not just billers.
Why CMS Issues These Numbers
Any facility that wants to bill Medicare or Medicaid for services must first be certified by CMS as meeting certain health and safety standards. When a facility passes that certification process, CMS assigns it a CCN. The number then becomes the facility’s identity within the Medicare and Medicaid systems. Claims submitted to Medicare reference the CCN so that CMS can verify the billing entity is a certified, approved provider.
Beyond billing, the CCN anchors a facility’s entire regulatory relationship with the federal government. Survey results, deficiency reports, enforcement actions, quality scores, and cost report data are all filed under the facility’s CCN. When CMS publishes information on Hospital Compare or its successor tools, the CCN is the key that links a specific hospital’s quality metrics to its identity. If a nursing home receives a citation for a safety violation, that citation lives in a database indexed by CCN. The number follows the facility through every interaction with federal oversight.
The Name Has Changed Over the Years
If you work in healthcare long enough, you will hear people refer to the same number by different names. Before CMS adopted the term “CMS Certification Number,” the identifier was commonly called the Medicare Provider Number. Even earlier, it went by the acronym OSCAR, which stood for the Online Survey, Certification, and Reporting system where the numbers were originally housed. Some older staff and legacy software systems still use these older labels. Regardless of the name, the underlying number and its structure have remained essentially the same. A crosswalk maintained by the National Bureau of Economic Research, for instance, maps CCNs to National Provider Identifiers precisely because CCNs remain the longstanding facility-level key in Medicare data.1NBER. National Provider Identifier (NPI) to Medicare CCN Crosswalk
The rename to “CMS Certification Number” was partly a clarity move. “Medicare Provider Number” implied the number was only about Medicare, when in practice it is also used in the Medicaid certification process and in various other federal reporting contexts. The newer name better reflects the number’s actual scope.
How a CCN Differs from an NPI
This is one of the most common points of confusion. The National Provider Identifier, or NPI, is a 10-digit number assigned under HIPAA to every healthcare provider, whether that provider is an individual physician, a group practice, or a hospital. NPIs are used primarily for electronic transactions like claims and eligibility checks, and every provider that transmits health information electronically is required to have one. NPIs are assigned by a national registry and do not encode any information about provider type, location, or specialty within the number itself.
A CCN, by contrast, is specific to facilities that participate in Medicare or Medicaid. Individual doctors do not get CCNs. The CCN also carries embedded information about state and provider type, which the NPI deliberately does not. A hospital will have both a CCN and an NPI, but the two numbers serve different purposes and live in different systems. The CCN is CMS’s internal certification tracker. The NPI is the universal identifier for electronic health transactions across all payers, not just government programs.
Researchers working with Medicare claims data frequently need to link the two. A claim might arrive with an NPI, but the regulatory and cost-report data CMS publishes is organized by CCN. That is why crosswalk files exist to translate between the two systems.1NBER. National Provider Identifier (NPI) to Medicare CCN Crosswalk
Who Gets a CCN and Who Does Not
The list of provider types that receive CCNs is broad but specific. It includes hospitals of all kinds (acute care, critical access, psychiatric, rehabilitation, children’s, long-term care), skilled nursing facilities, home health agencies, hospices, ambulatory surgical centers, end-stage renal disease facilities, rural health clinics, federally qualified health centers, and several other categories. Each type has its own range within the CCN numbering system.
What you will not find is a CCN assigned to an individual physician, a solo private practice that only sees commercially insured patients, or a provider that has opted out of Medicare and Medicaid entirely. The CCN is strictly a facility-level, federal-program-participation identifier. A physician who works at a hospital does not have their own CCN; they practice under the hospital’s CCN for Medicare billing purposes (though they absolutely have their own NPI).
Some facilities operate under more than one CCN. A large medical center with a main hospital campus and a separately certified psychiatric unit, for example, could hold two different CCNs because CMS treats the psychiatric unit as a distinct provider type. Similarly, a health system that owns multiple hospitals across different states will have a separate CCN for each facility, since the state code changes with geography.
How to Find a Facility’s CCN
If you need to look up a CCN for a specific hospital or nursing home, CMS publishes several publicly accessible tools. The Medicare Provider Enrollment, Chain, and Ownership System (PECOS) is the official enrollment database. CMS’s Care Compare website (the successor to Hospital Compare and Nursing Home Compare) also displays CCNs alongside quality ratings and inspection results. For researchers, CMS releases data files such as the Provider of Services file, which lists every certified provider along with its CCN, address, bed count, and other characteristics.
Patients rarely need to look up a CCN themselves, but it can be useful when verifying that a facility is legitimately enrolled in Medicare. If a hospital claims to accept Medicare but has no CCN on record, that is a red flag worth investigating before scheduling a procedure there. For healthcare administrators and billing staff, knowing the correct CCN is essential because submitting claims under the wrong number leads to denials and payment delays.
What Happens When a CCN Changes
CCNs are not permanent in the way a Social Security number follows a person for life. Several events can trigger a change. If a facility changes its provider type, say converting from a short-term acute care hospital to a critical access hospital, it receives a new CCN because the provider-type range in the last four digits shifts. A change of ownership does not always result in a new CCN (CMS may allow the new owner to keep the existing number under certain conditions), but a change in state location always does.
When a CCN changes, continuity in data becomes a headache. Quality metrics, cost reports, and survey histories filed under the old CCN do not automatically carry over to the new one in every CMS system. Researchers tracking a facility’s performance over time need to account for these breaks. Health systems going through mergers and acquisitions often deal with CCN transitions as part of the regulatory paperwork, and getting the new number approved and operational can take months.
One particularly tricky scenario involves hospital closures and reopenings. If a hospital closes and another entity later opens a facility at the same location, CMS treats it as a new provider and issues a fresh CCN. The new facility does not inherit the old one’s track record, for better or worse. This matters in communities where a hospital closure is followed by a new operator stepping in: even if the building is the same, the regulatory identity starts from scratch.
CCNs in Research and Public Data
For health services researchers, CCNs are a workhorse identifier. Medicare cost reports, which contain detailed financial and utilization data for every certified facility, are indexed by CCN. Publicly released Medicare claims datasets use CCNs to identify where patients received care. Studies examining hospital quality, spending variation, or the effects of policy changes on specific types of facilities almost always rely on CCNs to link different data sources together.
The embedded state and provider-type information in the CCN is especially handy for large-scale analyses. A researcher can filter an entire national dataset down to, say, all psychiatric hospitals in a given state just by selecting the appropriate state prefix and provider-type range. No additional lookup table is needed for that basic classification, because the CCN encodes it directly. This is in contrast to the NPI, which requires a separate lookup to determine what type of provider it belongs to.
That said, CCNs have quirks that trip up even experienced researchers. A facility that has undergone a CCN change mid-study can appear as two separate entities in the data unless the analyst manually links the old and new numbers. Facilities with multiple CCNs (like the hospital-plus-psychiatric-unit example) can lead to double-counting if the researcher is not careful about which CCN maps to which services. These are solvable problems, but they require familiarity with how CMS assigns and retires the numbers.
Common Misconceptions About CCNs
One frequent misunderstanding is that a CCN proves a facility is in good standing. It does not. A CCN confirms that a facility was certified to participate in Medicare or Medicaid at some point, but a facility can hold a CCN while simultaneously being under a termination track for serious deficiencies. The CCN is an enrollment identifier, not a seal of approval. To check a facility’s actual compliance status, you need to look at its survey and inspection results, which are filed under the CCN but are separate from it.
Another misconception is that all healthcare providers must have a CCN. Plenty of providers operate without one. A concierge medicine practice that does not bill Medicare, a private-pay physical therapy clinic, or a wellness center operating outside federal programs has no need for a CCN and will not be assigned one. The CCN universe covers facilities enrolled in CMS programs, which is a large portion of the healthcare landscape but not the entirety of it.
People also sometimes confuse a CCN with a state license number. State licensure and federal certification are related but separate processes. A hospital must typically be licensed by its state before it can apply for federal Medicare certification. The state license number is issued by the state health department; the CCN is issued by CMS. A facility can be state-licensed but not federally certified (meaning it could operate legally but could not bill Medicare), or it could hold both. The two numbers serve different regulatory masters and are not interchangeable.
CCNs for Specific Provider Types
The way CCNs are allocated varies enough by provider type that a few specifics are worth knowing. Critical access hospitals, a designation created to support small rural facilities, receive CCNs in a distinct range that immediately identifies them as such. This matters because critical access hospitals are reimbursed differently under Medicare (they receive cost-based reimbursement rather than the prospective payment most hospitals get), and the CCN range helps CMS and researchers quickly separate them in datasets.
Skilled nursing facilities have their own range and are among the most heavily scrutinized providers in the CCN system. Their inspection results, staffing data, and quality measures are published on Care Compare, all indexed by CCN. Families researching nursing homes can use the CCN to pull up a facility’s full federal record, including any penalties or special-focus designations.
Home health agencies present an interesting case because they serve patients in their homes rather than at a fixed clinical site. They still receive CCNs tied to the state where they are certified, and their service area can span large geographies. A single home health agency with one CCN might serve patients across dozens of counties. The CCN identifies the agency as an entity, not a physical location where care happens, which is a subtle but important distinction from how a hospital’s CCN works.
Hospice providers, dialysis centers, and ambulatory surgical centers each occupy their own CCN ranges as well. The consistent logic across all these types is the same: the first two digits are the state, and the remaining four digits place the facility within a provider-type bucket. That uniformity makes the system navigable once you understand the basic structure, even across very different kinds of healthcare organizations.