fbpx
Connect with us

Kaiser Health News

What One Hospital’s Slow Recovery From a Cyberattack Means for Patients

Published

on

by Farah Yousry, Side Effects Public Media
Fri, 16 Jun 2023 09:00:00 +0000

In fall 2021, staffers at Johnson Memorial Health were hoping they could finally catch their breath. They were just coming out of a weeks-long surge of covid-19 hospitalizations and deaths, fueled by the delta variant.

But on Oct. 1 at 3 a.m., a Friday, the hospital CEO's phone rang with an urgent call.

“My chief of nursing said, ‘Well, it looks like we got ,'” said David Dunkle, CEO of the system based in Franklin, Indiana.

Advertisement

The information technology team at Johnson Memorial discovered a ransomware group had infiltrated the health system's networks. The hackers left a ransom note on every server, demanding the hospital pay $3 million in bitcoin within a few days.

The note was signed by the “Hive,” a prominent ransomware group that has targeted more than 1,500 hospitals, school districts, and financial firms in over 80 countries, according to the Justice Department.

Johnson Memorial was just one victim in a rising wave of cyberattacks on U.S. hospitals. One study found that cyberattacks on the nation's facilities more than doubled from 2016 to 2021 — from 43 attacks to 91.

In the aftermath of a breach, the focus frequently falls on the risk of confidential patient information being exposed, but these attacks can also leave hospitals hemorrhaging millions of dollars in the months that follow, and also cause disruptions to patient care, potentially putting lives at stake.

Advertisement

After its own attack, the staff at Johnson Memorial suddenly had to revert to low-tech ways of patient care. They relied on pen and paper for medical and notes, and sent runners between departments to take orders and deliver test results.

A few hours after that 3 a.m. call, Dunkle was on the phone with cybersecurity experts and the FBI.

The burning question on his mind: Should his hospital pay the $3 million ransom to minimize disruptions to its operations and patient care?

Dunkle worried about potential fines levied by the Treasury Department's Office of Foreign Assets Control against the hospital if it paid a ransom to an unknown entity that turned out to be on a sanctions list.

Advertisement

Dunkle also worried about possible lawsuits, because the hackers claimed they stole sensitive patient information they'd release to the “dark web” if Johnson Memorial did not pay up. Other health data breaches have led to class-action lawsuits from patients.

The Office for , within the Department of Health and Human Services, can also impose financial penalties against hospitals if patient data protected by federal privacy laws is divulged.

“It was information overload,” Dunkle recalled. All the while, he had a hospital full of patients needing care and employees wondering what to do.

In the end, the hospital did not pay the ransom. decided to disconnect after the attack, assess, and then rebuild, which meant taking several critical systems offline. That upended normal operations in various departments.

Advertisement

The emergency department diverted ambulances with sick patients to other hospitals because the staff couldn't access patients' medical records. In the obstetrics unit, newborns usually wear security bracelets around their tiny legs to prevent unauthorized adults from moving the infant or leaving the unit with them. When that tracking system went dark, staff members physically guarded the unit doors.

During one delivery, nurses struggled to communicate with an Afghan refugee who came from the nearby military post to give birth. The remote translation service they typically used was inaccessible because of the cyberattack.

“Stressed-out nurses were using Google Translate to communicate with this woman in labor,” said Stacey Hummel, the maternity department manager. “It was crazy.”

Hummel said it was the hardest challenge she's ever faced in her 24 years of experience — even worse than the covid-19 pandemic. As the cyberattack unfolded, her nursing team was praying, “Please don't let the fetal monitors go down.”

Advertisement

And then they did.

The clinical staff suddenly could no longer digital notifications outside the labor rooms, notifications that help them monitor the vital signs of laboring women and their fetuses. That meant critical data points, like a dangerously low heart rate or high blood pressure, could go unnoticed.

“Once that happened, we had to station a nurse in every single room,” Hummel said. “So staffing was a nightmare because you had to stand there and watch the monitor.”

The hospital's billing department was also crippled. For months afterward, they were unable to bill insurance plans to be paid in a timely fashion. An IBM report estimated that cyberattacks on hospitals cost an average of nearly $10 million per incident, excluding any ransom payment — the highest among all industries. Hospital leaders say that, for this reason, cyberattacks pose an existential threat to the viability of hospitals across the country.

Advertisement

Cyber insurance has become a critical part of hospital budgets, according to John Riggi, national adviser for cybersecurity and risk at the American Hospital Association.

But some institutions are finding the insurance coverage isn't comprehensive, so even after an attack they remain on the hook for millions of dollars in damages. At the same time, insurance premiums can soar after a cyberattack.

“The government certainly could help in the space of cyber insurance, perhaps setting up a national cyber insurance fund, just like post-9/11, when folks could not obtain insurance against terrorist attacks, to help with that emergency financial aid,” Riggi said.

The federal government has taken steps to address the threat of cyberattacks against critical infrastructure, and awareness campaigns by the federal Cybersecurity and Infrastructure Security Agency. The FBI has taken down several ransomware groups, including the Hive, the group behind the attack on Johnson Memorial.

Advertisement

, Johnson Memorial is up and running again. But it took nearly six months to resume near-normal operations, according to the hospital's chief operating officer, Rick Kester.

“We worked … every single day in October, every single day. And some days, 12, 14 hours,” Kester said.

The hospital is still dealing with some ongoing costs. Its revenue cycle has not fully recovered and its cyberattack insurance claim, submitted nearly two years ago, still hasn't been paid, Dunkle said. The hospital's annual insurance premium is up 60% since the incident.

“That is an incredible increase in cost over the last three or four years and … when your claims aren't paid, it can be even more frustrating,” he said. “We are investing so much in cybersecurity right now that I don't know how small hospitals will be able to afford [to operate] much longer.”

Advertisement

And this week, a hospital in Illinois may become the first to close down partly due to a cyberattack. St. Margaret's Health in Spring Valley, Illinois, planned to close its doors June 16. Suzanne Stahl, chair of the hospital's parent company, SMP Health, said it became impossible to continue the hospital's operations “due to a number of factors, such as the covid-19 pandemic, the cyberattack on the computer system of St. Margaret's Health, and a shortage of staff.”

The hospital suffered a ransomware attack in 2021 that left it unable to bill insurance, Medicaid, or Medicare for more than three months, according to Linda Burt, the hospital's vice president of quality and community services. Burt said not being able to submit claims put the hospital in a “financial spiral.”

This article is from a partnership that includes Side Effects Public Media, NPR, and KFF Health News.

By: Farah Yousry, Side Effects Public Media
Title: What One Hospital's Slow Recovery From a Cyberattack Means for Patients
Sourced From: kffhealthnews.org/news/article/what-one-hospitals-slow-recovery-from-a-cyberattack-means-for-patients/
Published Date: Fri, 16 Jun 2023 09:00:00 +0000

Advertisement

Kaiser Health News

Medical Residents Are Increasingly Avoiding States With Abortion Restrictions

Published

on

Julie Rovner, KFF and Rachana Pradhan
Thu, 09 May 2024 12:01:00 +0000

Isabella Rosario Blum was wrapping up medical school and considering residency programs to become a practice physician when she got some frank advice: If she wanted to be trained to provide abortions, she shouldn't stay in Arizona.

Blum turned to programs mostly in states where access — and, by extension, abortion — is likely to remain protected, like California, Colorado, and New Mexico. Arizona has enacted a law banning most abortions after 15 weeks.

“I would really like to have all the training possible,” she said, “so of course that would have still been a limitation.”

Advertisement

In June, she will start her residency at Swedish Cherry Hill hospital in Seattle.

According to new statistics from the Association of American Medical Colleges, for the second year in a row, graduating from U.S. medical schools were less likely to apply this year for residency positions in states with abortion bans and other significant abortion restrictions.

Since the Supreme Court in 2022 overturned the constitutional right to an abortion, fights over abortion access have created plenty of uncertainty for pregnant patients and their doctors. But that uncertainty has also bled into the world of medical education, forcing some new doctors to factor state abortion laws into their decisions about where to begin their careers.

Fourteen states, primarily in the Midwest and South, have banned nearly all abortions. The new analysis by the AAMC — a preliminary copy of which was exclusively reviewed by KFF Health News before its public release — found that the number of applicants to residency programs in states with near-total abortion bans declined by 4.2%, compared with a 0.6% drop in states where abortion remains legal.

Advertisement

Notably, the AAMC's findings illuminate the broader problems abortion bans can create for a state's medical community, particularly in an era of provider shortages: The organization tracked a larger decrease in interest in residencies in states with abortion restrictions not only among those in specialties most likely to treat pregnant patients, like OB-GYNs and emergency room doctors, but also among aspiring doctors in other specialties.

“It should be concerning for states with severe restrictions on reproductive rights that so many new physicians — across specialties — are choosing to apply to other states for training instead,” wrote Atul Grover, executive director of the AAMC's Research and Action Institute.

The AAMC analysis found the number of applicants to OB-GYN residency programs in abortion ban states dropped by 6.7%, compared with a 0.4% increase in states where abortion remains legal. For internal medicine, the drop observed in abortion ban states was over five times as much as in states where abortion is legal.

In its analysis, the AAMC said an ongoing decline in interest in ban states among new doctors ultimately “may negatively affect access to care in those states.”

Advertisement

Jack Resneck Jr., immediate past president of the American Medical Association, said the data demonstrates yet another consequence of the post-Roe v. Wade era.

The AAMC analysis notes that even in states with abortion bans, residency programs are filling their positions — mostly because there are more graduating medical students in the U.S. and abroad than there are residency slots.

Still, Resneck said, “we're extraordinarily worried.” For example, physicians without adequate abortion training may not be able to manage miscarriages, ectopic pregnancies, or potential complications such as infection or hemorrhaging that could stem from pregnancy loss.

Those who work with students and residents say their observations support the AAMC's findings. “People don't want to go to a place where evidence-based practice and human rights in general are curtailed,” said Beverly Gray, an associate professor of obstetrics and gynecology at Duke University School of Medicine.

Advertisement

Abortion in North Carolina is banned in nearly all cases after 12 weeks. Women who experience unexpected complications or discover their baby has potentially fatal birth defects later in pregnancy may not be able to receive care there.

Gray said she worries that even though Duke is a highly sought training destination for medical residents, the abortion ban “impacts whether we have the best and brightest coming to North Carolina.”

Rohini Kousalya Siva will start her obstetrics and gynecology residency at MedStar Washington Hospital Center in Washington, D.C., this year. She said she did not consider programs in states that have banned or severely restricted abortion, applying instead to programs in Maryland, New Hampshire, New York, and Washington, D.C.

“We're physicians,” said Kousalya Siva, who attended medical school in Virginia and was previously president of the American Medical Student Association. “We're supposed to be giving the best evidence-based care to our patients, and we can't do that if we haven't been given abortion training.”

Advertisement

Another consideration: Most graduating medical students are in their 20s, “the age when people are starting to think about putting down roots and starting families,” said Gray, who added that she is noticing many more students ask about during their residency interviews.

And because most young doctors make their careers in the state where they do their residencies, “people don't feel safe potentially having their own pregnancies living in those states” with severe restrictions, said Debra Stulberg, chair of the Department of Family Medicine at the University of Chicago.

Stulberg and others worry that this self-selection away from states with abortion restrictions will exacerbate the shortages of physicians in rural and underserved areas.

“The geographic misalignment between where the needs are and where people are choosing to go is really problematic,” she said. “We don't need people further concentrating in urban areas where there's already good access.”

Advertisement

After attending medical school in Tennessee, which has adopted one of the most sweeping abortion bans in the nation, Hannah Light-Olson will start her OB-GYN residency at the University of California-San Francisco this summer.

It was not an easy , she said. “I feel some guilt and sadness leaving a situation where I feel like I could be of some help,” she said. “I feel deeply indebted to the program that trained me, and to the patients of Tennessee.”

Light-Olson said some of her fellow students applied to programs in abortion ban states “because they think we need pro-choice providers in restrictive states now more than ever.” In fact, she said, she also applied to programs in ban states when she was confident the program had a way to provide abortion training.

“I felt like there was no perfect, 100% guarantee; we've seen how fast things can change,” she said. “I don't feel particularly confident that California and New York aren't going to be under threat, too.”

Advertisement

As a of a scholarship she received for medical school, Blum said, she will have to return to Arizona to practice, and it is unclear what abortion access will look like then. But she is worried about long-term impacts.

“Residents, if they can't get the training in the state, then they're probably less likely to settle down and work in the state as well,” she said.

——————————
By: Julie Rovner, KFF Health News and Rachana Pradhan
Title: Medical Residents Are Increasingly Avoiding States With Abortion Restrictions
Sourced From: kffhealthnews.org/news/article/medical-students-residents-spurning-abortion-ban-states/
Published Date: Thu, 09 May 2024 12:01:00 +0000

Did you miss our previous article…
https://www.biloxinewsevents.com/paid-sick-leave-sticks-after-many-pandemic-protections-vanish/

Advertisement
Continue Reading

Kaiser Health News

Paid Sick Leave Sticks After Many Pandemic Protections Vanish

Published

on

Zach Dyer
Thu, 09 May 2024 09:00:00 +0000

Bill Thompson's wife had never seen him smile with confidence. For the first 20 years of their relationship, an infection in his mouth robbed him of teeth, one by one.

“I didn't have any teeth to smile with,” the 53-year-old of Independence, Missouri, said.

Thompson said he dealt with throbbing toothaches and painful swelling in his face from abscesses for years working as a cook at Burger King. He desperately needed to see a dentist but said he couldn't afford to take time off without pay. Missouri is one of many states that do not require employers to provide paid sick .

Advertisement

So, Thompson would swallow Tylenol and push through the pain as he worked over the hot .

“Either we go to work, have a paycheck,” Thompson said. “Or we take care of ourselves. We can't take care of ourselves because, well, this vicious circle that we're stuck in.”

In a nation that was sharply divided about government health mandates during the pandemic, the public has been warming to the idea of government rules providing for paid sick leave.

Before the pandemic, 10 states and the District of Columbia had laws requiring employers to provide paid sick leave. Since then, Colorado, New York, New Mexico, Illinois, and Minnesota have passed laws offering some kind of paid time off for illness. Oregon and California expanded previous paid leave laws. In Missouri, Alaska, and Nebraska, advocates are pushing to put the issue on the ballot this fall.

Advertisement

The U.S. is one of nine countries that do not guarantee paid sick leave, according to data compiled by the World Policy Analysis Center.

In response to the pandemic, Congress passed the Emergency Paid Sick Leave and Emergency and Medical Leave Expansion acts. These temporary measures allowed employees to take up to two weeks of paid sick leave for covid-related illness and caregiving. But the provisions expired in 2021.

“When the pandemic hit, we finally saw some real political will to solve the problem of not having federal paid sick leave,” said economist Hilary Wething.

Wething co-authored a recent Economic Policy Institute report on the state of sick leave in the United States. It found that more than half, 61%, of the lowest-paid workers can't get time off for an illness.

Advertisement

“I was really surprised by how quickly losing pay — because you're sick — can translate into immediate and devastating cuts to a family's household budget,” she said.

Wething noted that the lost wages of even a day or two can be equivalent to a month's worth of gasoline a worker would need to get to their job, or the choice between paying an electric bill or buying food. Wething said showing up to work sick poses a risk to co-workers and customers alike. Low-paying that often lack paid sick leave — like cashiers, nail technicians, home health aides, and fast-food workers — involve lots of face-to-face interactions.

“So paid sick leave is about both protecting the public health of a community and providing the workers the economic security that they desperately need when they need to take time away from work,” she said.

The National Federation of Independent Business has opposed mandatory sick leave rules at the state level, arguing that workplaces should have the flexibility to work something out with their employees when they get sick. The group said the cost of paying workers for time off, extra paperwork, and lost productivity burdens small employers.

Advertisement

According to a by the National Bureau of Economic Research, once these mandates go into effect, employees take, on average, two more sick days a year than before a law took effect.

Illinois' paid time off rules went into effect this year. Lauren Pattan is co-owner of the Old Bakery Beer Co. there. Before this year, the craft brewery did not offer paid time off for its hourly employees. Pattan said she supports Illinois' new law but she has to figure out how to pay for it.

“We really try to be respectful of our employees and be a good place to work, and at the same time we get worried about not being able to afford things,” she said.

That could mean customers have to pay more to cover the cost, Pattan said.

Advertisement

As for Bill Thompson, he wrote an op-ed for the Kansas City Star newspaper about his dental struggles.

“Despite working nearly 40 hours a , many of my co-workers are homeless,” he wrote. “Without health care, none of us can afford a doctor or a dentist.”

That op- generated attention locally and, in 2018, a dentist in his community donated his time and labor to Thompson's remaining teeth and replace them with dentures. This allowed his mouth to recover from the infections he'd been dealing with for years. , Thompson has a new smile and a job — with paid sick leave — working in food service at a hotel.

In his free time, he's been collecting signatures to put an initiative on the November ballot that would guarantee at least five days of earned paid sick leave a year for Missouri workers. Organizers behind the petition said they have enough signatures to take it before the voters.

Advertisement

——————————
By: Zach Dyer
Title: Paid Sick Leave Sticks After Many Pandemic Protections Vanish
Sourced From: kffhealthnews.org/news/article/paid-sick-leave-post-pandemic-state-laws/
Published Date: Thu, 09 May 2024 09:00:00 +0000

Did you miss our previous article…
https://www.biloxinewsevents.com/forget-ringing-the-button-for-the-nurse-patients-now-stay-connected-by-wearing-one/

Continue Reading

Kaiser Health News

Forget Ringing the Button for the Nurse. Patients Now Stay Connected by Wearing One.

Published

on

Phil Galewitz, KFF News
Wed, 08 May 2024 09:00:00 +0000

HOUSTON — Patients admitted to Houston Methodist Hospital get a monitoring device about the size of a half-dollar affixed to their chest — and an unwitting role in the expanding use of artificial intelligence in health care.

The slender, battery-powered gadget, called a BioButton, vital signs heart and breathing rates, then wirelessly sends the readings to nurses sitting in a 24-hour control room elsewhere in the hospital or in their homes. The device's software uses AI to analyze the voluminous data and detect signs a patient's condition is deteriorating.

Hospital say the BioButton has improved care and reduced the workload of bedside nurses since its rollout last year.

Advertisement

“Because we catch things earlier, patients are doing better, as we don't have to wait for the bedside team to notice if something is going wrong,” said Sarah Pletcher, system vice president at Houston Methodist.

But some nurses fear the technology could wind up replacing them rather than supporting them — and harming patients. Houston Methodist, one of dozens of U.S. hospitals to employ the device, is the first to use the BioButton to monitor all patients except those in intensive care, Pletcher said.

“The hype around a lot of these devices is they provide care at scale for less labor costs,” said Michelle Mahon, a registered nurse and an assistant director of National Nurses United, the profession's largest U.S. union. “This is a trend that we find disturbing,” she said.

The rollout of BioButton is among the latest examples of hospitals deploying technology to improve efficiency and address a decades-old nursing shortage. But that transition has raised its own concerns, including about the device's use of AI; polls show the public is wary of health providers relying on it for patient care.

Advertisement

In December 2022 the FDA cleared the BioButton for use in adult patients who are not in critical care. It is one of many AI tools now used by hospitals for tasks like reading diagnostic imaging results.

In 2023, President Joe Biden directed the Department of Health and Human Services to develop a plan to regulate AI in hospitals, including by collecting reports of patients harmed by its use.

The leader of BioIntelliSense, which developed the BioButton, said its device is a huge advance compared with nurses walking into a room every few hours to measure vital signs. “With AI, you now move from ‘I wonder why this patient crashed' to ‘I can see this crash coming before it happens and intervene appropriately,'” said James Mault, of the Golden, Colorado-based company.

The BioButton stays on the skin with an adhesive, is waterproof, and has up to a 30-day battery life. The company says the device — which allows providers to quickly notice deteriorating health by recording more than 1,000 measurements a day per patient — has been used on more than 80,000 hospital patients nationwide in the past year.

Advertisement

Hospitals pay BioIntelliSense an annual subscription fee for the devices and software.

Houston Methodist officials would not reveal how much the hospital pays for the technology, though Pletcher said it equates to less than a cup of coffee a day per patient.

For a hospital system that treats thousands of patients at a time — Houston Methodist has 2,653 non-ICU beds at its eight Houston-area hospitals — such an investment could still translate to millions of dollars a year.

Hospital officials say they have not made any changes in nurse staffing and have no plans to because of implementing the BioButton.

Advertisement

Inside the hospital's control center for virtual monitoring on a recent morning, about 15 nurses and technicians dressed in scrubs sat in front of large monitors showing the health status of hundreds of patients they were assigned to monitor.

A red checkmark next to a patient's name signaled the AI software had found readings trending outside normal. Staff members could click into a patient's medical record, showing patients' vital signs over time and other medical history. These virtual nurses, if you will, could contact nurses on the floor by phone or email, or even dial directly into the patient's room via call.

Nutanben Gandhi, a technician who was watching 446 patients on her monitor that morning, said that when she gets an alert, she looks at the patient's health record to see if the anomaly can be easily explained by something in the patient's condition or if she needs to contact nurses on the patient's floor.

Oftentimes an alert can be easily dismissed. But identifying signs of deteriorating health can be tough, said Steve Klahn, Houston Methodist's clinical director of virtual medicine.

Advertisement

“We are looking for a needle in a haystack,” he said.

Donald Eustes, 65, was admitted to Houston Methodist in March for prostate cancer treatment and has since been treated for a stroke. He is happy to wear the BioButton.

“You never know what can happen here, and an extra set of eyes looking at you is a good thing,” he said from his hospital bed. After being told the device uses AI, the Montgomery, , man said he has no problem with its helping his clinical team. “This sounds like a good use of artificial intelligence.”

Patients and nurses alike benefit from remote monitoring like the BioButton, said Pletcher of Houston Methodist.

Advertisement

The hospital has placed small cameras and microphones inside all patient rooms enabling nurses outside to communicate with patients and perform tasks such as helping with patient admissions and discharge instructions. Patients can include members on the remote calls with nurses or a doctor, she said.

Virtual technology frees up on-duty nurses to provide more hands-on help, such as starting an intravenous line, Pletcher said. With the BioButton, nurses can wait to take routine vital signs every eight hours instead of every four, she said.

Pletcher said the device reduces nurses' stress in monitoring patients and allows some to work more flexible hours because virtual care can be done from home rather than coming to the hospital. Ultimately it helps retain nurses, not drive them away, she said.

Sheeba Roy, a nurse at Houston Methodist, said some members of the nursing staff were nervous about relying on the device and not checking patients' vital signs as often themselves. But testing has shown the device provides accurate information.

Advertisement

“After we implemented it, the staff loves it,” Roy said.

Serena Bumpus, chief executive officer of the Texas Nurses Association, said her concern with any technology is that it can be more burdensome on nurses and take away time with patients.

“We have to be hypervigilant in ensuring that we are not leaning on this to replace the ability of nurses to critically think and assess patients and validate what this device is telling us is true,” Bumpus said.

Houston Methodist this year plans to send the BioButton home with patients so the hospital can better track their progress in the weeks after discharge, measuring the quality of their sleep and checking their gait.

Advertisement

“We are not going to need less nurses in health care, but we have limited resources and we have to use those as thoughtfully as we can,” Pletcher said. “Looking at projected demand and seeing the supply we have coming, we will not have enough to meet demand, so anything we can do to give time back to nurses is a good thing.”

——————————
By: Phil Galewitz, KFF Health News
Title: Forget Ringing the Button for the Nurse. Patients Now Stay Connected by Wearing One.
Sourced From: kffhealthnews.org/news/article/hospital-artificial-intelligence-patient-monitoring-biobutton-houston/
Published Date: Wed, 08 May 2024 09:00:00 +0000

Did you miss our previous article…
https://www.biloxinewsevents.com/they-were-shot-at-the-super-bowl-parade-and-might-have-bullets-in-their-bodies-forever/

Advertisement
Continue Reading

News from the South

Trending