Initially thought to be an attack by a nation-state, actual culprit turned out to be a known ransomware group and each day brings new revelations about the cyberattack
Fallout continues from cyberattack on Change Healthcare, the revenue cycle management (RCM) company that is a business unit of Optum, itself a division of UnitedHealth Group. Recent news accounts say providers are losing an estimated $100 million per day because they cannot submit claims to Change Healthcare nor receive reimbursement for these claims.
The cyberattack took place on February 21. The following day, UnitedHealth Group filed a Material Cybersecurity Incidents report (form 8-K) with the US Securities and Exchange Commission (SEC) in which it stated it had “identified a suspected nation-state associated cybersecurity threat actor [that] had gained access to some of the Change Healthcare information technology systems.”
A few days later the real identity of the threat actor was revealed to be a ransomware group known as “BlackCat” or “ALPHV,” according to Reuters.
Change Healthcare of Nashville, Tenn., is “one of the largest commercial prescription processors in the US,” Healthcare Dive reported, adding that hospitals, pharmacies, and military facilities had difficulty transmitting prescriptions “as a result of the outage.”
Change Healthcare handles about 15 billion payments each year.
According to a Change Healthcare statement, the company “became aware of the outside threat” and “took immediate action to disconnect Change Healthcare’s systems to prevent further impact.”
Change Healthcare has provided a website where parties that have been affected by the cyberattack can find assistance and updated information on Change’s response to the intrusion and theft of its data.
“The fallout is only starting to happen now. It will get worse for consumers,” Andrew Newman (above), founder and Chief Technology Officer, ReasonLabs, told FOX Business, adding, “We know that the likely destination for [the Change Healthcare] data is the Dark Web, where BlackCat will auction it all off to the highest bidder. From there, consumers could expect to suffer from things like identity theft, credit score downgrades, and more.” Clinical laboratories are also targets of cyberattacks due to the large amount of private patient data stored on their laboratory information systems. (Photo copyright: ReasonLabs.)
Millions of Records May be in Wrong Hands
Reuters reported that ALPHV/BlackCat admitted it “stole millions of sensitive records, including medical insurance and health data from the company.”
The ransomware group has been focusing its attacks on healthcare with 70 incidents since December, according to federal agencies.
In a letter to HHS, AHA warned, “Change Healthcare’s downed systems will have an immediate adverse impact on hospital finances. … Their interrupted technology controls providers’ ability to process claims for payment, patient billing, and patient cost estimation services.”
“My understanding is Change/Optum touches almost every hospital in the US in one way or another,” John Riggi, AHA’s National Advisor for Cybersecurity and Risk, told Chief Healthcare Executive. “It has sector wide impact in potential risk. So, really, this is an attack on the entire sector.” Riggi spent nearly 30 years with the FBI.
Some physician practices may also have been impacted by the Change Healthcare cyberattack, according to the Medical Group Management Association (MGMA). In a letter to HHS, MGMA described negative changes in processes at doctors’ offices. They include delays in paper and electronic statements “for the duration of the outage.”
In addition, “prescriptions are being called into pharmacies instead of being electronically sent, so patients’ insurance information cannot be verified by pharmacies, and [the patients] are forced to self-pay or go without necessary medication.”
Here are “just a few of the consequences medical groups have felt” since the Change Healthcare cyberattack, according to the MGMA:
Substantial billing and cash flow disruptions, such as a lack of electronic claims processing. Both paper and electronic statements have been delayed. Some groups have been without any outgoing charges or incoming payments for the duration of the outage.
Limited or no electronic remittance advice from health plans. Groups are having to manually pull and post from payer portals.
Prior authorization submissions have been rejected or have not been transmittable at all. This further exacerbates what is routinely ranked the number one regulatory burden by medical groups and jeopardizes patient care.
Groups have been unable to perform eligibility checks for patients.
Many electronic prescriptions have not been transmitted, resulting in call-in prescriptions to pharmacies or paper prescriptions for patients. Subsequently, patients’ insurance information cannot be verified by pharmacies, and they are forced to self-pay or go without necessary medication.
Lack of connectivity to important data infrastructure needed for success in value-based care arrangements, and other health information technology disruptions.
Medical laboratory leaders and pathologists are advised to consult with their colleagues in IT and cybersecurity on how to best prevent ransomware attacks. Labs hold vast amount of private patient information. Recent incidents suggest more steps and strategies may be needed to protect laboratory information systems and patient data.
Plans by several national retail pharmacy chains to expand primary care services and even some clinical laboratory test offerings may be delayed because of financial woes
Times are tough for the nation’s retail pharmacy chains. Rite Aid Corporation, headquartered in Philadelphia, closed 25 stores this year and has now filed for bankruptcy. In a press release, the retail pharmacy company announced it has “initiated a voluntary-court supervised process under Chapter 11 of the US Bankruptcy Code,” and that it plans to “significantly reduce the company’s debt” and “resolve litigation claims in an equitable manner.”
Rite Aid may eventually close 400 to 500 of its 2,100 stores, Forbes reported.
Meanwhile, other retail pharmacy chains are struggling as well. CVS Health, headquartered in Woonsocket, Rhode Island, and Walgreens Boots Alliance of Deerfield, Illinois, are each closing hundreds of stores, according to the Daily Mail.
They are each experiencing problems with labor costs, theft, being disintermediated for prescriptions by pharmacy benefit managers (PBMs), and probably building too many stores in most markets.
This is a significant development, in the sense that Walgreens, CVS, and Walmart are each working to open and operate primary care clinics in their stores. This is a way to offset the loss of filling prescriptions, which has migrated to PBMs. Primary care clinics are important to the revenue of local clinical laboratories, but retail pharmacy chains do not yet operate enough primary care clinics in their retail pharmacies to be a major influence on the lab testing marketplace.
“With the support of our lenders, we look forward to strengthening our financial foundation, advancing our transformation initiatives, and accelerating the execution of our turnaround strategy,” said Jeffrey Stein (above), Rite Aid’s CEO/Chief Restructuring Officer, in a press release. Clinical laboratory leaders may want to closely monitor the activities of the retail pharmacies in their areas. (Photo copyright: Rite Aid.)
Multiple Pharmacy Companies at Financial Risk
Rite Aid Corporation (NYSE: RAD) confirmed it continues to operate its retail and online platforms and has received from lenders $3.45 billion in financing to support the company through the bankruptcy process.
However, according to the Associated Press (AP), Rite Aid has experienced “annual losses for several years” and “faces financial risk from lawsuits over opioid prescriptions,” adding that the company reported total debts of $8.6 billion.
Additionally, the US Department of Justice (DOJ) filed a complaint “alleging that Rite Aid knowingly filled unlawful prescriptions for controlled substances,” explained a DOJ press release.
Rite Aid is not the only retail pharmacy brand dealing with unwelcome developments. Fortune reported last year that Walgreens and CVS paid a combined $10 billion to 12 states for “involvement in the opioid epidemic.”
Walgreens intends to close 150 US and 300 United Kingdom locations, its former Chief Financial Officer James Kehoe shared in a third quarter 2023 earnings call transcribed by Motley Fool.
And in a news release, CVS announced plans to close 900 stores between 2022 and 2024.
Pharmacy Companies’ Investment in Primary Care
Though they are experiencing difficulties on the retail side, Walgreens and CVS have significantly invested in primary care.
In that same ebrief, we reported on CVS’ acquisition of Oak Street Health, a Chicago-based primary care company, for $10.6 billion. CVS plans to have more than 300 healthcare centers by 2026.
“We looked at our business, and we said, ‘We’re seeing an aging population.’ We know people don’t have access to primary care. We know that value-based care is where it’s going. We know that there’s been a renaissance in home (care). So that’s kind of how we approached our acquisitions,” Karen Lynch, CVS Chief Executive Officer told Fortune.
Other Challenges to Retail Pharmacies
It could be that these major pharmacy chains are hoping entry into primary care will offset the loss of sales from prescriptions that have migrated to PBM organizations.
In addition to reimbursement challenges, retail pharmacies are reportedly experiencing:
High labor costs,
Competition from online, bricks-and-mortar, and grocery businesses, and
Effects from the work-at-home trend, among other struggles.
“I think there’s a number of challenges which are coming to a head. One, you have ongoing reimbursement pressure. The reimbursement level for drugs continues to decrease, so profit margin on the core part of the business is under pressure,” Rodey Wing, a partner in the health and retail practices of global strategy and management consulting firm Kearney, told Drug Store News.
Additionally, the pharmacy’s drug sales need to be high enough to retain pharmacists, who are difficult to recruit in a post-pandemic market, Drug Store News explained.
And in the retail space where products are displayed, some pharmacies struggle to compete with Amazon on convenience and with “dollar” stores on price. And with more people working from home, retail pharmacies are seeing less foot traffic, Drug Store News noted.
Retail pharmacy companies also have competition from pharmacies conveniently situated in grocery and big-box stores, Forbes reported. These include:
Walmart, for its part, reduced operating hours of pharmacies at more than 4,500 sites, Daily Mail reported.
Thus, medical laboratory leaders would be wise to keep an eye on market changes in their local retail pharmacies. Some locations are equipped with clinical laboratory services and a closure could give local labs an opportunity to reach out to patients and physicians who need access to a new testing provider.
Expect there to be more clinical laboratory testing at pharmacies as retail pharmacy chains expand their primary care offerings
Walgreens Boots Alliance (NASDAQ:WBA) of Deerfield, Illinois, continues to expand its primary care footprint with VillageMD’s latest acquisition of Starling Physicians, a multi-specialty physicians group with 30 locations in Connecticut, according to a VillageMD news release. Walgreens is the majority owner of VillageMD, which now has more than 700 medical centers, Healthcare Dive noted.
This deal continues the trend of corporations acquiring physician practices. Already, the majority of physicians are employees, not partners in a private practice physician group. Under corporate ownership, these physician groups often decide to change their clinical laboratory providers. For that reason, managers and pathologists at local medical laboratories will want to explore how they might provide daily lab testing services to the corporate owners of these primary care clinics.
The Hartford Business Journal called VillageMD’s acquisition of Starling Physicians—which is subject to a state investigation for possible certificate-of-need requirement—one of Connecticut’s “more high-profile healthcare merger and acquisition deals in Connecticut in recent years.”
The Starling Physicians group acquisition comes just a few months after
VillageMD paid $8.9 billion for Summit Health-CityMD of Berkeley Heights, New Jersey, with primary care services in the Northeast and Oregon. Walgreens invested $3.5 billion in that transaction, a Summit Health news release noted.
These acquisitions by Walgreens/VillageMD provide opportunities for local clinical laboratories to serve the physicians in these practices, though the operations may have a different patient flow and work process than traditional family practice clinics located in medical offices around community hospitals.
“Starling shares our vision of being a physician-led model and they provide care in a compassionate and exceptional way to all the patients they serve. By integrating primary care with specialty care, we are able to optimize access to high-quality care for our patients,” said Tim Barry (above), CEO and Chair of VillageMD in the news release. “This is a natural extension of our growth in the Northeast, including our recent acquisition of Summit Health-CityMD. Together, we are transforming the way healthcare is delivered in the United States.” Clinical laboratories in these areas will want to develop a strategy for serving the physicians practicing at these non-traditional locations. (Photo copyright: The Business Journals.)
Primary Care at Retail Locations a Growing Trend
Dark Daily and its sister publication The Dark Report have reported extensively on the growing trend by pharmacy chains and other retail superstores to add primary care services to their footprint.
In “By 2027, Walgreens Wants 1,000 Primary Care Clinics,” The Dark Report covered how Walgreens had disclosed that it would spend $5.2 billion to acquire a 63% interest to become the majority owner of VillageMD. Fierce Healthcare reported that “[Walgreens] planned to open at least 600 Village Medical at Walgreens primary-care practices across the country by 2025 and 1,000 by 2027.”
VillageMD is a primary care provider with same-day appointments, telehealth virtual visits, in-home care, and clinical laboratory diagnostic testing such as blood tests and urinalysis. Many VillageMD practices are located in buildings next door to Walgreens sites throughout the United States. (Photo copyright: Walgreens.)
Other Retailers Investing in Primary Care
Other retailers have recently taken deeper dives into healthcare as well.
According to Forbes, “The acquisition comes amid a flurry of acquisitions across the US for doctor practices, which are being purchased at an unprecedented pace by large retailers like Walgreens Boots Alliance, CVS Health, Amazon, and Walmart. Meanwhile, medical care providers owned by health insurers like UnitedHealth Group’s Optum and Cigna’s Evernorth are also in the doctor practice bidding war.”
And in February, CVS announced plans to acquire for $10.6 billion Oak Street Health, a Chicago-based primary care company with 169 medical centers across 21 states that plans to have more than 300 centers by 2026.
Do Clinical Laboratories Want Retail Customers?
The question of whether clinical laboratories should pursue retail customers is at this point academic. Consumer demand is driving the change and labs that don’t keep up may be left behind.
“The trend of putting full-service primary care clinics in retail pharmacies is a significant development for the clinical laboratory industry,” wrote Robert Michel, Editor-in-Chief of Dark Daily and The Dark Report. “These clinics will need clinical lab tests and can be expected to shift patients away from traditional medical clinic sites for two reasons—lower price and convenience—since this new generation of primary care clinics will be located around the corner from where people live and work.”
Thus, healthcare system laboratories or large reference labs may want to reach out to Walgreens, CVS, Amazon, and Walmart for test referrals. These and other large retailers are investing heavily in the belief that consumers will continue to seek convenience in their healthcare.
Walmart may be the largest, but it is not the only retailer offering clinical laboratory testing and primary care services at conveniently-located retail stores
Earlier this month in “How Walmart Plans to Take Over Health Care,” CNBC asked, “Is Walmart the future of healthcare?” Good question. In the midst of the COVID-19 pandemic, Walmart (NYSE:WMT) managed to open six Walmart Health locations in Georgia and Arkansas. In addition, the giant retailer announced plans to open more primary care clinics at Walmart Supercenters in Chicago and Florida.
Clinical laboratory managers who struggle to keep revenues flowing should take notice. These retail clinics may not have their own medical laboratories, but their primary care physicians will be generating lab specimens.
And because Walmart offers medical laboratory tests at these locations, with so many people opting to visit health clinics installed within retail stores, independent clinical labs could see a noticeable drop in business as Walmart Health expands its network across the US.
Therefore, clinical labs near Walmart Health locations would be wise to develop strategies and services toward becoming a lab test provider to these retail clinics.
Walmart Health Eyes Florida Primary Care Market
“The past few months in particular have exposed the vulnerabilities of our healthcare system and left many without access to adequate health resources,” said Lori Flees, Senior Vice President and Chief Operating Officer, Walmart US Health and Wellness, in a blog post. “We know our customers need us more than ever, which is why we’re announcing an expansion of Walmart Health.
“We’re planning to open seven Walmart Health locations in the Jacksonville [Florida] market in 2021, with at least one opening in early 2021, and we’re beginning conversations in the Orlando and Tampa markets. Our new health centers will be in communities in need of affordable, accessible preventive care, which we will help deliver through Walmart Health,” Flees wrote.
Walmart could be operating 22 Walmart Health locations like that shown above in Georgia, Florida, Arkansas, and Illinois by the end of 2021, Fierce Healthcare reported. This means Walmart Health may double its locations by the end of this year. Clinical laboratories near these locations may want to reach out and offer lab testing services to these retail clinics. Notice that, in the picture of the exterior of a Walmart Health clinic, “Labs” is a service that is prominently displayed as one of the important clinical services offered at that site. (Photo copyright: Walmart.)
Can Clinical Laboratories Compete or Collaborate with Walmart?
A news release announcing the opening of the Walmart Health Centers in Chicago stated that Walmart Health partners with “local, on-the-ground health providers to deliver primary care, labs, x-ray and diagnostics, counseling, dental, and hearing services all in one facility at transparent pricing regardless of a patient’s insurance status.”
However, clinical laboratories wanting to be a testing provider to Walmart Health may have to keep their costs of tests and services down in order to be competitive.
Walmart Health’s “Summary Price List” provides a complete list of medical laboratory tests and services offered at the retail clinics.
Other Primary Care Disruptors
Walmart is not the only retailer offering primary care services amid the COVID-19 pandemic.
Walgreens Boots Alliance (NASDAQ:WBA) partnered with VillageMD, a provider of primary care services, to open 500-700 “Village Medical at Walgreens” primary care clinics “in more than 30 US markets in the next five years, with the intent to build hundreds more thereafter,” according to a news release.
By end of summer 2021, 40 “Village Medical at Walgreens” primary care sites (above) are expected to open in Texas, Arizona, and Florida, according to a January 2021 news release. Walgreens is investing $1 billion over three years in the clinics, which will be situated near its stores. “Through these conveniently located clinics at our neighborhood stores, we will uniquely integrate the pharmacist as a critical member of VillageMD’s multi-disciplinary care team to provide patients with personalized and coordinated care,” said Stefano Pessina, Walgreens Executive Vice Chairman and CEO, in the news release. (Photo copyright: Walgreens Boots Alliance.)
Clinical laboratory managers and pathologists will want to be on the alert for opportunities to forge relationships with Walmart Health, Walgreens, and CVS Health to capture new primary care-related testing business coming out of these non-traditional healthcare providers.
Coronavirus pandemic expected to spur wider acceptance of drone delivery services for clinical laboratory specimens and medical supplies
Routine delivery of clinical laboratory specimens and medical supplies by drone moved one step closer to reality with news that Walmart (NYSE:WMT), Quest Diagnostics (NYSE:DGX), and DroneUp of Virginia Beach, Va., are partnering to bring at-home self-collection COVID-19 test kits to residents of several areas hard hit by the COVID-19 pandemic.
In its race to keep pace with online retailer Amazon (NASDAQ:AMZN), Walmart last September implemented two drone-delivery trials. One, according to Progressive Grocer, is with Tel Aviv, Israel-based drone company Flytrex, to deliver select grocery and household essentials in and around Fayetteville, N.C. The other trial program is with drone company Zipline of San Francisco, to test delivery of certain health and wellness products to areas around Walmart’s headquarters in Bentonville, Ark., Progressive Grocer also reported.
Then, Walmart announced a third pilot project for home delivery—one that could potentially affect clinical laboratories. This time, in collaboration with Quest and DroneUp, Walmart is piloting delivery of at-home COVID-19 collection kits in North Las Vegas, and Cheektowaga, New York, a Walmart news release stated.
Is this yet another example of how the COVID-19 pandemic will continue to drive shifts in delivery of key healthcare services? Probably.
According to Walmart’s news release, “Patients who qualify for drone delivery of the COVID-19 self-collection kits must live in a single-family residence within a 1-mile radius of the designated [Walmart] Supercenters in North Las Vegas and Cheektowaga. The kits will land on the driveway, front sidewalk, or backyard of the customer’s home, depending on where there are cars and trees. There is no delivery or kit cost for customers electing to receive an at-home [COVID-19] kit delivered via drone. Once the kits are delivered, the person will perform a self-administered nasal swab in the privacy of their home and send their sample back to Quest Diagnostics for testing using the included prepaid shipping label.”
Click the image to watch the short video that demonstrates Walmart’s home delivery service of at-home COVID-19 test kits. Clinical laboratories in these areas may wonder how Walmart’s new drone-delivery service will impact their own specimen delivery programs. (Photo/video copyright: Walmart.)
The giant retailer’s expanding use of drone delivery systems will likely lead to greater acceptance among consumers of unmanned aerial vehicles for delivering all sorts of personal items, as well as various types of clinical laboratory specimens. If consumers embrace drone delivery systems, clinical laboratories with existing courier and logistics networks may experience another disruption in how they do business.
In a news release following the announcement of a yet another drone-delivery service of COVID-19 at-home test kits—this time in El Paso, Texas,—Amanda Jenkins, Vice President of Operation Support and Implementation, Walmart US Health and Wellness, said, “Walmart has been serving the El Paso community throughout the pandemic with drive-thru testing sites and extended testing hours, and we wanted to provide another way to access testing that provides convenience and leverages technology, while learning how drones could impact the delivery of healthcare in the future,” KTSM-9 TV reported.
Drone Delivery Systems Worldwide for Healthcare
The United States is not the only country turning to drone technology to speed deliveries and reduce person-to-person contact during the pandemic. A World Economic Forum blog post outlined the critical role drones are playing in China, the world’s most populated country, as it responds to the health crisis.
“At the moment of life and death, the air transport network can significantly confine the flow of people, avoid unnecessary physical contact, and prevent secondary transmission,” Lv Yinxiang, Secretary of the Party Committee of the County People’s Hospital, said in the blog post. “Medical samples delivered through air can shrink the delivery time … while saving precious field resources.”
Amazon also is predicting a bright future for drone delivery of all types of goods. In August, Amazon’s Prime Air drone delivery service received approval from the Federal Aviation Administration (FAA) to operate its fleet of drones, CNBC reported. Amazon launched its drone project in 2013 and began the process of seeking FAA approval in 2019.
And in “WakeMed Uses Drone to Deliver Patient Specimens,” Dark Daily’s sister publication, The Dark Report (TDR), reported on UPS’ launch of a drone delivery service on the WakeMed Health and Hospitals medical campus in Raleigh, N.C. The implementation followed a two-year test period during which UPS used drones manufactured by Matternet of Menlo Park, Calif., to fly clinical laboratory specimens from a medical complex of physicians’ offices to the health system’s clinical laboratory.
COVID-19 Pandemic Drives Drone Delivery System Development
Tom Ward, Walmart’s Senior Vice President for Customer Product, predicts the drone delivery systems being rolled out during the COVID-19 pandemic will increase the use of contactless delivery for all types of deliveries, not just healthcare.
“There’s a lot we can learn from our drone delivery pilots to help determine what roles drones can play in pandemic response, healthcare delivery, and retail,” he said in the Walmart news release. “We hope drone delivery of self-collection kits will shape contactless testing capabilities on a larger scale and continue to bolster the innovative ways Walmart plans to use drone delivery in the future.”
The widespread use of drone technology appears to be soaring to new heights as the COVID-19 pandemic moves forward into the new year. Clinical laboratory managers will want to keep their eyes on the skies as this new delivery system becomes more commonplace and potentially disrupts the way laboratory specimens traditionally have traveled to and from medical laboratories.
