fbpx
Connect with us

Kaiser Health News

Hacking at UnitedHealth Unit Cripples a Swath of the US Health System: What to Know

Published

on

Darius Tahir
Thu, 29 Feb 2024 10:00:00 +0000

Early in the morning of Feb. 21, Change Healthcare, a company unknown to most Americans that plays a huge role in the U.S. system, issued a brief statement saying some of its applications were “currently unavailable.”

By the afternoon, the company described the situation as a “cyber security” problem.

Since then, it has rapidly blossomed into a crisis.

Advertisement

The company, recently purchased by insurance giant UnitedHealth Group, reportedly suffered a cyberattack. The impact is wide and expected to grow. Change Healthcare's business is maintaining health care's pipelines — payments, requests for insurers to authorize care, and much more. Those pipes handle a big load: Change says on its website, “Our cloud-based network supports 14 clinical, financial, and operational transactions annually.”

Initial reports have focused on the impact on pharmacies, but techies say that's understating the issue. The American Hospital Association says many of its members aren't getting paid and that doctors can't check whether have coverage for care.

But even that's just a slice of the emergency: CommonWell, an institution that helps health providers share medical records, information critical to care, also relies on Change technology. The system contained records on 208 million individuals as of July 2023. Courtney Baker, CommonWell marketing manager, said the network “has been disabled out of an abundance of caution.”

“It's small ripple pools that will get bigger and bigger over time, if it doesn't get solved,” Saad Chaudhry, chief digital and information officer at Luminis Health, a hospital system in Maryland, told KFF Health News.

Advertisement

Here's what to know about the hack:

Who Did It?

Media reports are fingering ALPHV, a notorious ransomware group also known as Blackcat, which has become the target of numerous law enforcement agencies worldwide. While UnitedHealth Group has said it is a “suspected nation-state associated” attack, some outside analysts dispute the linkage. The gang has previously been blamed for hacking casino companies MGM and Caesars, among many other targets.

The Department of Justice alleged in December, before the Change hack, that the group's victims had already paid it hundreds of millions of dollars in ransoms.

Advertisement

Is This a New Problem?

Absolutely not. A study published in JAMA Health Forum in December 2022 found that the annual number of ransomware attacks against hospitals and other providers doubled from 2016 to 2021.

“It's more of the same, man,” said Aaron Miri, the chief digital and information officer at Baptist Health in Jacksonville, Florida.

Because the assaults disable the target's computer systems, providers have to shift to paper, slowing them down and making them vulnerable to missing information.

Advertisement

Further, a study published in May 2023 in JAMA Network Open examining the effects of an attack on a health system found that waiting times, median length of stay, and incidents of patients leaving against medical advice all increased — at neighboring emergency departments. The results, the authors wrote, mean cyberattacks “should be considered a regional disaster.”

Attacks have devastated rural hospitals, Miri said. And wherever health care providers are hit, patient safety issues follow.

What Does It Mean for Patients?


If You're Caught in a Cybersecurity Breach, Here Are Steps to Take:

– Monitor the notices and bills you receive from insurers and providers. Contact them immediately if anything seems suspicious.– If a medical provider requests your Social Security number on intake forms, leave the space blank, and politely push back if they insist.– If your health plan offers free credit or identity monitoring following a breach, take it.If you're concerned your data has been compromised: – Go to the Federal Trade Commission's identity theft site to file an identity theft , if appropriate.– If someone used your name to get medical care, contact every provider who may have been involved and get copies of your medical records. Correct any errors.– Notify your health plan's fraud department and send a copy of the FTC identity theft report.– File free fraud alerts with the three major credit reporting agencies.Michelle Andrews

Advertisement

Year after year, more Americans' health data is breached. That exposes people to identity theft and medical error.

Care can also suffer. For example, a 2017 attack, dubbed “NotPetya,” forced a rural West Virginia hospital to reboot its operations and hit pharma company Merck so hard it wasn't able to fulfill production targets for an HPV vaccine.

Because of the Change Healthcare attack, some patients may be routed to new pharmacies less affected by billing problems. Patients' bills may also be delayed, industry executives said. At some point, many patients are likely to receive notices their data was breached. Depending on the exact data that has been pilfered, those patients may be at risk for identity theft, Chaudhry said. Companies often offer free credit monitoring services in those situations.

“Patients are dying because of this,” Miri said. Indeed, an October preprint from researchers at the of Minnesota found a nearly 21% increase in mortality for patients in a ransomware-stricken hospital.

Advertisement

How Did It Happen?

The Health Information Sharing and Analysis Center, an industry coordinating group that disseminates intel on attacks, has told its members that flaws in an application called ConnectWise ScreenConnect are to blame. Exact details couldn't be confirmed.

It's a tool tech support teams use to remotely troubleshoot computer problems, and the attack is “apparently fairly trivial to execute,” H-ISAC warned members. The group said it expects additional victims and advised its members to update their technology. When the attack first hit, the AHA recommended its members disconnect from systems both at Change and its corporate parent, UnitedHealth's Optum unit. That would affect services ranging from claims approvals to reference tools.

Millions of Americans see physicians and other practitioners employed by UnitedHealth and are covered by the company's insurance plans.

Advertisement

UnitedHealth has said only Change's systems are affected and that it's safe for hospitals to use other digital services provided by UnitedHealth and Optum, which include claims filing and processing systems.

But not many chief information “are jumping to reconnect,” Chaudhry said. “It's an uneasy feeling.”

Miri says Baptist is using the conglomerate's technology and that he trusts UnitedHealth's word that it's safe.

Where's the Federal Government?

Advertisement

Neither executive was sanguine about the future of cybersecurity in health care. “It's going to get worse,” Chaudhry said.

“It's a shame the feds aren't helping more,” Miri said. “You'd think if our nuclear infrastructure were under attack the feds would respond with more gusto.”

While the departments of Justice and State have targeted the ALPHV group, the government has stayed behind the scenes more in the aftermath of this attack. Chaudhry said the FBI and the Department of Health and Human Services have been attending calls organized by the AHA to brief members about the situation.

Miri said rural hospitals in particular could use more for security and that agencies like the Food and Drug Administration should have mandatory standards for cybersecurity.

Advertisement

There's some recognition among that improvements need to be made.

“This latest attack is just more evidence that the status quo isn't working and we have to take steps to shore up cybersecurity in the health industry,” said Sen. Mark Warner (D-Va.), the chair of the Senate Select Committee on Intelligence and a longtime advocate for stronger cybersecurity, in a statement to KFF Health News.

——————————
By: Darius Tahir
Title: Hacking at UnitedHealth Unit Cripples a Swath of the US Health System: What to Know
Sourced From: kffhealthnews.org/news/article/unitedhealth-change-healthcare-blackcat-hack-cybersecurity/
Published Date: Thu, 29 Feb 2024 10:00:00 +0000

Did you miss our previous article…
https://www.biloxinewsevents.com/toxic-gas-that-sterilizes-medical-devices-prompts-safety-rule-update/

Advertisement

Kaiser Health News

Union With Labor Dispute of Its Own Threatens to Cut Off Workers’ Health Benefits

Published

on

Phil Galewitz, KFF Health
Fri, 26 Jul 2024 09:00:00 +0000

The National Education Association, the nation's largest union, is threatening to cut off health insurance to about 300 Washington, D.C.-based workers on Aug. 1 in an effort to end a bitter contract dispute.

It's a tactic some private employers have used as leverage against unionized workers that has drawn scrutiny from congressional Democrats and is prohibited for state employers in California. Experts on labor law say they've never seen a union make the move against its own workers.

“This is like a man-bites-dog situation where the union is now in a position as the employer,” said Paul Clark, a professor of labor and employment relations at Penn State University. “It's not a good look for a union.”

Advertisement

NEA workers with pressing health needs are worried but say they won't fold. Joye Mercer Barksdale, a writer on the NEA's relations team, said she needs coverage for a medical procedure to address atrial fibrillation, a cardiac disorder. “This is insane for the NEA to use our health benefits as a bargaining chip,” she said.

But Barksdale said the threat isn't enough to force her to agree to an unacceptable contract. “I am not ready to give in,” she said.

The NEA Staff Organization, the union representing workers at the NEA's headquarters, launched a strike on July 5 in Philadelphia, during the union's annual delegate assembly. It was its second walkout this summer as the two parties negotiate a new contract, navigating sticking points such as wages and remote work.

In response, the NEA ended the conference early. was supposed to speak at the but withdrew, refusing to cross the picket line. The NEA on July 24 endorsed Kamala Harris for president.

Advertisement

On July 8, the day after the conference had been scheduled to end, the NEA locked out workers. In a letter the day before, the NEA informed its unionized workers that they would not be paid, effective immediately, and their health benefits would expire at the end of July unless a new deal were reached.

“NEA cannot allow NEASO to act again in a way that will bring such lasting harm to our members and our organization,” Kim Anderson, the NEA's executive director, wrote in the letter, obtained by KFF Health News. “We are, and have always been, committed both to our union values and to the importance of conducting ourselves as a model employer.”

Democrats in Congress, including Sens. Sherrod Brown of Ohio and Bob Casey of Pennsylvania, introduced legislation last year to protect striking workers from losing their health benefits, after several large companies, including General Motors, John Deere, RTX (formerly Raytheon Technologies), and the maker of Kellogg's cereals, threatened to or did cut off coverage during labor disputes.

“Workers shouldn't have to choose between their 's health and a fair contract,” Brown said in a statement to KFF Health News.

Advertisement

The legislation was endorsed by large labor unions including the Service Employees International Union and United Steelworkers, according to a press release from Brown's office. The NEA wasn't among them.

“This tactic is immoral, and it should be illegal,” United Steelworkers' president at the time, Conway, said in the release.

Advertisement

at the NEA, which represents teachers and other administrators, declined an interview request. In a statement, the organization's president, Becky Pringle, said “we are making every effort to reach an agreement as quickly as possible” with its staff union.

“As union leaders who have been on strike, we recognize the significance and impact of these important decisions on a personal and family level. We truly value our employees and look forward to continued collaboration with NEASO to develop a new contract that benefits us all,” she said.

Kate Hilts, a digital strategist who works for the NEA, said she fears losing her coverage will her unable to afford treatment for a rare autoimmune disease that attacks her kidneys. Her next treatment was slated for August.

“I wake up every day and can't believe this is ,” she said. “You would expect this from an employer that is antiworker or has a terrible labor record, but I am totally flabbergasted that a labor union would do this that bills itself as pro-worker, pro-family, pro-education, and pro-children.”

Advertisement

The NEA staff union has filed multiple charges with the National Labor Relations Board this year, including allegations that the NEA withheld overtime pay and failed to provide information on the outsourcing of millions of dollars in bargaining unit work.

California is one of the only states that protect striking workers from losing health coverage. The state legislature passed a law in 2021 that blocks the tactic from being used against public employees and another law in 2022 that allows any striking workers who lose their insurance to immediately get heavily discounted coverage through the state's Affordable Care Act marketplace.

If they remain locked out, the NEA workers would be eligible for coverage under COBRA, a federal program that allows people who are fired or laid off to maintain their employer-sponsored insurance for 18 months.

But the coverage can be a financial hardship, as individuals often must pay the entire cost of their insurance premiums, plus a 2% administrative fee.

Advertisement

Another option for workers would be coverage through the Affordable Care Act marketplace, though that also could be costly. And it may be unclear how soon that coverage would begin or whether insurers would cover their existing doctors.

“I'm hoping the NEA will be so ashamed of what they are doing that, at the very least, they will not take away our health benefits,” Barksdale said.

——————————
By: Phil Galewitz, KFF Health News
Title: Union With Labor Dispute of Its Own Threatens to Cut Off Workers' Health Benefits
Sourced From: kffhealthnews.org/news/article/nea-national-education-association-union-threatens-health-insurance-benefit-lockout/
Published Date: Fri, 26 Jul 2024 09:00:00 +0000

Did you miss our previous article…
https://www.biloxinewsevents.com/the-cdcs-test-for-bird-flu-works-but-it-has-issues/

Advertisement
Continue Reading

Kaiser Health News

The CDC’s Test for Bird Flu Works, but It Has Issues

Published

on

Arthur Allen and Amy Maxmen
Fri, 26 Jul 2024 09:00:00 +0000

The Centers for Disease Control and Prevention says a glitch in its bird flu test hasn't harmed the agency's outbreak response. But it has ignited scrutiny of its go-it-alone approach in testing for emerging pathogens.

The agency has quietly worked since April to resolve a nagging issue with the test it developed, even as the virus swept through dairy farms and chicken houses across the country and infected at least 13 farmworkers this year.

At a congressional hearing July 23, Rep. Brett Guthrie (R-Ky.) asked about the issue. “Boy, that rings of 2020,” he said, referring to when the nation was caught off guard by the pandemic, in part because of dysfunctional tests made by the CDC. Demetre Daskalakis, director of the CDC's National Center for Immunization and Respiratory Diseases, responded that the agency rapidly developed a workaround that makes its bird flu test reliable.

Advertisement

“The tests are 100% usable,” he later told KFF , adding that the FDA studied the tests and came to the same conclusion. The imperfect tests, which have a faulty element that sometimes requires testing a sample again, will be replaced soon. He added, “We have made sure that we're offering a high-quality product.”

Still, some researchers were unnerved by the news coming four months after the government declared a worrisome bird flu outbreak among cattle. The CDC's test is the only one available for clinical use. Some researchers say its flaws, though manageable, underscore the risk of relying on a single entity for testing.

The problem came to light in April as the agency prepared to distribute its test to about 100 public health labs around the country. CDC detected the issue through a quality control system put in place after the covid test catastrophe of 2020.

Daskalakis said the CDC's original test design was fine, but a flaw emerged when a company contracted by the agency manufactured the tests in bulk. In these tests, one of two components that recognize proteins called H5 in the H5N1 bird flu virus was unreliable, eliminating an important safeguard. By targeting the same protein twice, tests have a built-in backup in case one part fails.

Advertisement

The agency developed a fix to ensure a reliable result: If only one of the two parts detected H5, the test was considered inconclusive and would be run again. With the FDA's blessing, the CDC distributed the tests — with workaround instructions — to public health labs.

Wroblewski, director of infectious diseases at the Association of Public Health Laboratories, said the results of the tests have not been ambiguous, and there is no need to discard the tests.

Still, the agency has asked a different manufacturer to remake the faulty component so that 1.2 million improved tests will be available soon, Daskalakis said. Some of the updated tests are already in stock at the CDC, but the FDA hasn't yet signed off on their use. Daskalakis declined to name the manufacturers.

Meanwhile, the outbreak has grown. Farmworkers continue to lack information about the virus and gear to protect them from it. Rural clinics may miss cases if they don't catch a person's connection to a farm and notify health officials rather than their usual diagnostic testing laboratories.

Advertisement

Those clinical labs remain unauthorized to test for the bird flu. Several of those labs have spent months working through analyses and red tape so that they can run the CDC's tests. As part of the licensing , the CDC alerted them to the workaround with the current test, too.

But outside select circles, the news was largely overlooked. “I'm totally surprised by this,” Alex Greninger, assistant director of the of Washington Clinical Virology Laboratory, told KFF Health News this . Greninger's lab is developing its own test and has been to obtain CDC test kits to evaluate.

“It's not a red alarm,” he said, but he's worried that as the CDC and the FDA spend months developing and evaluating an updated test, the only one available relies on a single component. If the genetic code underlying that fragment of the H5 protein mutates, the test could give false results.

It's not uncommon for academic and commercial diagnostic labs to make mistakes and catch them during quality control checks, as the CDC did. Still, this isn't the agency's first mishap. In 2016, well before the covid debacle, CDC officials for months directed public health labs to use a Zika test that failed about a third of the time.

Advertisement

The CDC caught and worked to remediate the situation far more quickly and effectively in this case. Nonetheless, the mishap raises concern. Michael Mina, chief science officer of the telemedicine company eMed.com, said diagnostic companies may be better suited to the task.

“It's a reminder that CDC is not a robust manufacturer of tests” and lacks the resources that industry can marshal for their production, Mina said. “We do not ask CDC to make vaccines and pharmaceuticals, and we do not ask the Pentagon to manufacture missiles.”

The CDC has licensed its updated test design to at least seven clinical diagnostic labs. Such labs are the foundation of testing in the U.S. But none have FDA clearance to use them.

Diagnostic labs are developing their own tests, too. But that has been slow-going. One reason is the lack of guaranteed sales. Another is regulatory uncertainty. Recent FDA guidance could make it harder for nongovernmental laboratories to issue new tests in the early phase of pandemics, said Susan Van Meter, president of the American Clinical Laboratory Association, in a July 1 letter to the FDA.

Advertisement

Transparency is also critical, scientists said. Benjamin Pinsky, medical director of the clinical virology laboratory at Stanford University, said as a public agency the CDC should make its protocol — its recipe for making the test — easily accessible online.

The World Health Organization does so for its bird flu tests, and with that information in hand, Pinsky's lab has developed an H5 bird flu test suited to the strain circulating this year in the U.S. The lab published its approach this month but doesn't have FDA authorization for its broad use.

The CDC's test recipe is available in a published patent, Daskalakis said.

“We have made sure that tests are out there, and that they work,” he added.

Advertisement

As the CDC came under fire at the July 23 congressional hearing, Daniel Jernigan, director of the CDC's National Center for Emerging and Zoonotic Infectious Diseases, noted that testing is just one tool. The agency needs money for another promising area — looking for the virus in wastewater. Its current program uses supplemental funds, he said: “It is not in the current budget and will go away without additional .”

——————————
By: Arthur Allen and Amy Maxmen
Title: The CDC's Test for Bird Flu Works, but It Has Issues
Sourced From: kffhealthnews.org/news/article/bird-flu-test-cdc-flaws/
Published Date: Fri, 26 Jul 2024 09:00:00 +0000

Continue Reading

Kaiser Health News

KFF Health News’ ‘What the Health?’: Harris in the Spotlight

Published

on

Thu, 25 Jul 2024 18:45:00 +0000

The Host

Julie Rovner
KFF Health News


@jrovner


Read Julie's stories.

Advertisement

Julie Rovner is chief Washington correspondent and host of KFF Health News' weekly health policy news , “What the Health?” A noted expert on health policy issues, Julie is the author of the critically praised reference book “Health Care Politics and Policy A to Z,” now in its third edition.

As Vice President Kamala Harris appears poised to become the Democratic Party's presidential nominee, health policy in general and reproductive health issues in particular are likely to have a higher profile. Harris has long been the Biden administration's point person on abortion rights and reproductive health and was active on other health issues while serving as California's attorney general.

Meanwhile, is back for a brief session between presidential conventions, but efforts in the GOP-led House to pass the annual spending bills, due by Oct. 1, have into the usual roadblocks over abortion-related issues.

This week's panelists are Julie Rovner of KFF Health News, Stephanie Armour of KFF Health News, Rachel Cohrs Zhang of Stat, and Alice Miranda Ollstein of Politico.

Advertisement

Panelists

Stephanie Armour
KFF Health News


@StephArmour1


Read Stephanie's stories.

Rachel Cohrs Zhang
Stat News

Advertisement


@rachelcohrs


Read Rachel's stories.

Alice Miranda Ollstein
Politico


@AliceOllstein

Advertisement


Read Alice's stories.

Among the takeaways from this week's episode:

  • President Joe Biden's to drop out of the presidential race has turned attention to his likely successor on the Democratic ticket, Vice President Kamala Harris. At this late hour in the campaign, she is expected to adopt Biden's health policies, though many anticipate she'll take a firmer stance on restoring . And while abortion rights supporters are enthusiastic about Harris' candidacy, opponents are eager to frame her views as extreme.
  • As he transitions from incumbent candidate to outgoing president, Biden is working to frame his legacy, including on health policy. The president has expressed pride that his signature domestic achievement, the Inflation Reduction Act, took on the pharmaceutical industry, including by forcing the makers of the most expensive drugs into negotiations with Medicare. Yet, as with the Affordable Care Act's delayed implementation and results, most Americans have yet to see the IRA's potential effect on drug prices.
  • Lawmakers continue to be hung up on federal government spending, leaving appropriations work undone as they prepare to leave for summer recess. Fights over abortion are, once again, gumming up the works.
  • In abortion news, Iowa's six-week limit is scheduled to take effect next week, causing rippling problems of abortion access throughout the region. In Louisiana, which added the two drugs used in medication abortions to its list of controlled substances, doctors are having difficulty using the pills for other indications. And doctors who oppose abortion are pushing higher-risk procedures, like cesarean sections, in lieu of pregnancy termination when the mother's life is in danger — as states with strict bans, like Texas and Louisiana, are reporting a rise in the use of surgeries, including hysterectomies, to end pregnancies.
  • The Government Accountability Office reports that many states incorrectly hundreds of thousands of eligible people from the Medicaid rolls during the “unwinding” of the public health emergency's coverage protections. The Biden administration has been reluctant to call out those states publicly in an attempt to keep the process as apolitical as possible.

Also this week, Rovner interviews Anthony Wright, the new executive director of the consumer health advocacy group Families USA. Wright spent the past two decades in California, working with, among others, now-Vice President Kamala Harris on various health issues.

Plus, for “extra credit,” the panelists suggest health policy stories they read this week that they think you should read, too: 

Julie Rovner: NPR's “A Study Finds That Dogs Can Smell Your Stress — And Make Decisions Accordingly,” by Rachel Treisman.  

Advertisement

Alice Miranda Ollstein: Stat's “A Pricey Gilead HIV Drug Could Be Made for Dramatically Less Than the Company Charges,” by Silverman, and Politico's “Federal HIV Program Set To Wind Down,” by Alice Miranda Ollstein and David Lim. 

Stephanie Armour: Vox's “Free Medical School Won't Solve the Doctor Shortage,” by Dylan Scott.  

Rachel Cohrs Zhang: Stat's “How UnitedHealth Harnesses Its Physician Empire To Squeeze Profits out of Patients,” by Bob Herman, Tara Bannow, Casey Ross, and Lizzy Lawrence. 

Also mentioned on this week's podcast:

Advertisement

Credits

Francis Ying
Audio producer

Emmarie Huetteman
Editor

To hear all our , click here.

And subscribe to KFF Health News' “What the Health?” on Spotify, Apple Podcasts, Pocket Casts, or wherever you listen to podcasts.

KFF Health News is a national newsroom that produces in-depth journalism about health issues and is one of the core operating programs at KFF—an independent source of health policy research, polling, and journalism. Learn more about KFF.

Advertisement

USE OUR CONTENT

This story can be republished for free (details).

——————————
Title: KFF Health News' ‘What the Health?': Harris in the
Sourced From: kffhealthnews.org/news/podcast/what-the-health-357-kamala-harris-campaign-health-policy-july-25-2024/
Published Date: Thu, 25 Jul 2024 18:45:00 +0000

Did you miss our previous article…
https://www.biloxinewsevents.com/montana-looks-to-become-latest-state-to-boost-nonprofit-hospital-oversight/

Advertisement
Continue Reading

Trending