PERCUTANEOUS NEEDLE CORE BIOPSY LUNG OR MEDIASTINUM

What’s New – Beginning January 1, 2021:

  1. CPT CODE

  2. CODE DESCRIPTION

  3. AMA CPT INSTRUCTIONS

OLD – In 2020, the code for a percutaneous lung or mediastinum was:

  • 32405   Biopsy, lung or mediastinum, percutaneous needle

NEW – Beginning January 1, 2021, the code and the description will change to:

  • 32408   Core needle biopsy lung or mediastinum percutaneous, including image guidance, when performed

In addition, AMA CPT code instructions were added.  In summary:  The difference between core needle biopsy and fine needle aspiration are explained:

  • Core needle biopsy is typically performed with a needle that is designed to obtain a core sample of tissue for histopathologic evaluation
  • Fine needle aspiration (FNA) biopsy is performed when material is aspirated with a fine needle and the cells are examined cytologically
  • Unlike the current code 32405, image guidance is included in the new code 32408. Guidance codes (ie, 76942 Ultrasound, 77002 Fluoro, 77012 CT, and 77021 MR) may not be reported separately with 32408
  • 32408 is reported once per lesion sampled in a single session
  • When separate lesions of the lung or mediastinum are biopsied with image guidance in the same session, CPT coding instructions state “…use 32408 once for each lesion with modifier 59 for the second and each additional core needle lung, or mediastinal biopsy.”
  • When a needle core biopsy of the lung or mediastinum with image guidance is done at the same time as a core biopsy of another site, both the core needle biopsy for the other site and image guidance may be reported separately with modifier 59
  • When FNA biopsy and core needle biopsy of the lung or mediastinum are performed on the same lesion in the same session using the same type of image guidance, assign modifier 52 with either the FNA or the core biopsy
  • In the event FNA biopsy and core needle biopsy of the lung or mediastinum are performed on the same lesion at the same session using different types of image guidance, both image-guided biopsy codes may be reported separately and modifier 52 is applied to one of the codes
  • When FNA biopsy is performed on one lesion and core needle biopsy of the lung and mediastinum is performed on a separate lesion in the same session using the same type of image guidance, both codes can be assigned and modifier 59 should be appended to one
  • When FNA biopsy is performed on one lesion and a core needle biopsy of the lung and mediastinum is performed on a separate lesion in the same session but using different types of image guidance, both the FNA biopsy and 32408 can be coded. Modifier 59 would be appended to one of the codes

NOTES: 

  • AMA guidelines may differ from CMS policy.  Be sure to check NCCI Policy Manual for Medicare Services – Effective January 1, 2021 as well as Medically Unlikely Edits.
  • 2021 CMS Allowed Amounts for these codes are not yet finalized. We will update this article with the 2021 CMS Allowed Amounts once they are finalized.

For questions on this or other radiology and interventional radiology documentation and coding matters, please contact Wendy Block, CIRCC, RCC and the StreamlineMD coding team at wblock@streamlinemd.com.

Share the Post:

Related Posts

Notice

Cyber Incident Update – 9/28/25 at 6:00 pm EST:

StreamlineMD applications are up and live!

Access Client Portal Here

We are pleased to inform you that, following clearance from our cybersecurity experts, client access to our system has been restored. You may begin accessing the system starting at 6:00 PM EST today, Sunday, September 28, 2025.

Please note that while core functionality is fully restored, the following features are currently unavailable as we continue working to bring all components back online:

1. SMD Mobile App (viewing PDF chart)
2. Patient Portal
3. RxPhoto (inside the EHR)

We are working to restore these remaining services as quickly and securely as possible.

We will continue to monitor system performance closely and will provide updates as additional components become available.

If you experience any issues or require support, please contact our support team directly at 330-564-2641.

Thank you once again for your continued patience, understanding, and trust.

Cyber Incident Update – 9/28/25 at 2:00 pm EST:

Following our scheduled call with the cybersecurity team earlier today, we have been advised that additional security measures must be implemented before client access can be restored. Specifically, changes to our VPN configuration are required to ensure a more secure connection environment.

Our internal teams are actively working on these adjustments and will move as quickly and carefully as possible to complete the necessary changes.

Our next update will be at 4:00 PM EST.

Cyber Incident Update – 9/28/25 at 12:00 pm EST:

We are pleased to share that our internal teams currently have access to the system environment. In the interim, if needed, we are able to assist by running your patient appointment schedules for the week. Please contact our support team or email at smdhelpdesk@prcmedicalllc.zohosupport.com if you require this service.

We are scheduled to meet with our cybersecurity team at 1:00 PM EST today to review final clearance for restoring client access. We will provide another update following that discussion.

We appreciate your continued patience and partnership as we work to bring services back online safely and securely.

Cyber Incident Update – 9/27/25 at 10:00 pm EST:

We are pleased to report that our routine nightly processes have completed successfully, and the system environment remains stable and fully operational.

At this stage, we are awaiting final clearance from our cybersecurity partner before restoring client access.

However, our partner informed us that they need more time and so this clearance will not be available until after 1:00 PM EST tomorrow, Sunday, September 28, 2025.

Thank you for your patience while we maintain the highest standards of security and system integrity. 

Cyber Incident Update – 9/27/25 at 7:00 pm EST:

We are continuing to move forward with final preparations for restoring system access. Our internal teams have completed their validation processes, and the environment remains fully operational.

At this time, we are running our routine nightly processes to further confirm system stability and readiness. We continue to await final clearance from our cybersecurity experts to bring services fully back online.

We remain optimistic that systems will be accessible to clients by tomorrow morning, Sunday, September 29, 2025, at 7:00 AM EST.

As always, we are taking every measure to ensure a secure and controlled restoration.

Thank you again for your continued patience and support. Our next update will be provided by 10:00 PM EST.

Cyber Incident Update – 9/27/25 at 11:00 am EST:

We are pleased to share that our team has gained access to the system environment and is actively conducting testing—an important step toward the full restoration of services.

As part of this process, we have completed testing of the Practice Management (PM) and Coding software and are pleased to report that no issues have been identified with the software. Testing will continue across all system components to ensure overall stability and reliability.

Our teams will continue working throughout the day to validate all aspects of the system before bringing it back online.

We are deeply grateful for your continued patience, support, and trust as we proceed with restoration in a safe and controlled manner.

We will provide another update at 2:00 pm EST.

Cyber Incident Update – 9/26/25 at 7:00 pm EST:

We are pleased to share that our team is now gaining access to the system environment and actively conducting testing. This is an important step toward full restoration of services.

We again want to reassure you that there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

Our teams will continue to work throughout the evening and into the weekend to validate all aspects of the system before bringing it back online.

Thank you for your continued patience, support, and trust as we move forward with restoration in a safe and controlled manner.

We will provide another update at 10:00 am EST on Saturday, September 27, 2025.

Cyber Incident Update – 9/26/25 at 3:00 pm EST:

We continue to make steady progress in our restoration efforts. At this time, 95% of servers have been cleared; however, they remain behind protective firewalls as we work closely with our team of experts toward full restoration.

The StreamlineMD systems will remain unavailable for the rest of today, Friday, September 26, 2025. Our teams will begin comprehensive testing of all aspects of the system as soon as possible, likely this evening and over the weekend.

Importantly, there is no evidence of any compromise of Protected Health Information (PHI) or damage to our systems.

We truly appreciate your support and understanding during this process. You are important to us, and we remain committed to restoring services safely and securely.

We will provide another update at 6:00 pm EST.

Cyber Incident Update – 9/26/25 at 2:00 pm EST:

We continue to work diligently this afternoon with our cybersecurity team and are making steady progress.   

We anticipate the StreamlineMD systems will remain inaccessible for the remainder of today, Friday, September 26, 2025.  

We will provide another update at 6:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 11:00 am EST:

We continue to work throughout the day with our cybersecurity team and continue to make progress.  

We anticipate the StreamlineMD systems will not be accessible before 3:00 pm EST on Friday, September 26, 2025

We will provide another update at 2:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 09:00 am EST:

We continue to work this morning with our cybersecurity team and continue to make progress.   

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.  

We will provide another update at 12:00 pm EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/26/25 at 07:00 am EST:

We have continued to work through the night with our cybersecurity team and continue to make progress.  

We will continue restoring servers to service and testing internally. 

We still don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025. 

We will provide another update at 9:00 am EST.

We appreciate your continued patience and understanding as we work to restore services in a secure and controlled manner.

Cyber Incident Update – 9/25/25 at 11:00 pm EST:

So far, we are making great progress, and our systems are internally coming back online. At this time, there is no evidence of system damage or PHI compromise.

Throughout the night, we will continue restoring servers to service and testing internally.

We don’t anticipate StreamlineMD systems to be fully operational before 12:00 pm EST on Friday, September 26, 2025.

We will provide another update on Friday, September 26, at 6:00 am EST


Cyber Incident Update –9/25/25 at 7:00 pm EST:

We are currently in the process of restoring our servers and anticipate determining a timeline for resuming full operations by 10:00 PM EST this evening, September 25, 2025.

Our team continues to work diligently and in close coordination with our security partners in response to the cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precaution, our systems remain offline to prevent any potential data compromise. We continue to follow our established cybersecurity protocols to ensure the protection and integrity of your data.

We will provide our next update by 10:00 PM EST today.

We appreciate your continued patience and understanding as we work to bring our systems back online safely.

Incident Update – 9/25/25 at 12:00 pm EST:

StreamlineMD is currently working closely with our security team to address a cybersecurity incident that occurred during the overnight hours of September 24, 2025. As a precautionary measure, we proactively shut down our systems to prevent any potential data compromise.

Our team is actively following established cybersecurity protocols to ensure the continued protection of your data. At this time, the software will remain inaccessible for the remainder of the day, September 25, 2025.

We understand the impact this may have on your operations and sincerely appreciate your patience and understanding. We are committed to providing updates as frequently as possible and will keep you informed of our progress.

StreamlineMD is experiencing a cyber incident

Our security software detected malicious behavior and our team of internal and external experts are working to resolve the issue. The security team has made it clear that we need to shut down our services altogether, pending a more detailed analysis.