Initially thought to be an attack by a nation-state, actual culprit turned out to be a known ransomware group and each day brings new revelations about the cyberattack
Fallout continues from cyberattack on Change Healthcare, the revenue cycle management (RCM) company that is a business unit of Optum, itself a division of UnitedHealth Group. Recent news accounts say providers are losing an estimated $100 million per day because they cannot submit claims to Change Healthcare nor receive reimbursement for these claims.
The cyberattack took place on February 21. The following day, UnitedHealth Group filed a Material Cybersecurity Incidents report (form 8-K) with the US Securities and Exchange Commission (SEC) in which it stated it had “identified a suspected nation-state associated cybersecurity threat actor [that] had gained access to some of the Change Healthcare information technology systems.”
A few days later the real identity of the threat actor was revealed to be a ransomware group known as “BlackCat” or “ALPHV,” according to Reuters.
Change Healthcare of Nashville, Tenn., is “one of the largest commercial prescription processors in the US,” Healthcare Dive reported, adding that hospitals, pharmacies, and military facilities had difficulty transmitting prescriptions “as a result of the outage.”
Change Healthcare handles about 15 billion payments each year.
According to a Change Healthcare statement, the company “became aware of the outside threat” and “took immediate action to disconnect Change Healthcare’s systems to prevent further impact.”
Change Healthcare has provided a website where parties that have been affected by the cyberattack can find assistance and updated information on Change’s response to the intrusion and theft of its data.
“The fallout is only starting to happen now. It will get worse for consumers,” Andrew Newman (above), founder and Chief Technology Officer, ReasonLabs, told FOX Business, adding, “We know that the likely destination for [the Change Healthcare] data is the Dark Web, where BlackCat will auction it all off to the highest bidder. From there, consumers could expect to suffer from things like identity theft, credit score downgrades, and more.” Clinical laboratories are also targets of cyberattacks due to the large amount of private patient data stored on their laboratory information systems. (Photo copyright: ReasonLabs.)
Millions of Records May be in Wrong Hands
Reuters reported that ALPHV/BlackCat admitted it “stole millions of sensitive records, including medical insurance and health data from the company.”
The ransomware group has been focusing its attacks on healthcare with 70 incidents since December, according to federal agencies.
In a letter to HHS, AHA warned, “Change Healthcare’s downed systems will have an immediate adverse impact on hospital finances. … Their interrupted technology controls providers’ ability to process claims for payment, patient billing, and patient cost estimation services.”
“My understanding is Change/Optum touches almost every hospital in the US in one way or another,” John Riggi, AHA’s National Advisor for Cybersecurity and Risk, told Chief Healthcare Executive. “It has sector wide impact in potential risk. So, really, this is an attack on the entire sector.” Riggi spent nearly 30 years with the FBI.
Some physician practices may also have been impacted by the Change Healthcare cyberattack, according to the Medical Group Management Association (MGMA). In a letter to HHS, MGMA described negative changes in processes at doctors’ offices. They include delays in paper and electronic statements “for the duration of the outage.”
In addition, “prescriptions are being called into pharmacies instead of being electronically sent, so patients’ insurance information cannot be verified by pharmacies, and [the patients] are forced to self-pay or go without necessary medication.”
Here are “just a few of the consequences medical groups have felt” since the Change Healthcare cyberattack, according to the MGMA:
Substantial billing and cash flow disruptions, such as a lack of electronic claims processing. Both paper and electronic statements have been delayed. Some groups have been without any outgoing charges or incoming payments for the duration of the outage.
Limited or no electronic remittance advice from health plans. Groups are having to manually pull and post from payer portals.
Prior authorization submissions have been rejected or have not been transmittable at all. This further exacerbates what is routinely ranked the number one regulatory burden by medical groups and jeopardizes patient care.
Groups have been unable to perform eligibility checks for patients.
Many electronic prescriptions have not been transmitted, resulting in call-in prescriptions to pharmacies or paper prescriptions for patients. Subsequently, patients’ insurance information cannot be verified by pharmacies, and they are forced to self-pay or go without necessary medication.
Lack of connectivity to important data infrastructure needed for success in value-based care arrangements, and other health information technology disruptions.
Medical laboratory leaders and pathologists are advised to consult with their colleagues in IT and cybersecurity on how to best prevent ransomware attacks. Labs hold vast amount of private patient information. Recent incidents suggest more steps and strategies may be needed to protect laboratory information systems and patient data.
This comes on top of months of strikes by NZ medical laboratory workers seeking fair pay and safe working conditions
Te Whatu Ora (aka, Health New Zealand, the country’s publicly funded healthcare system) recently ordered health and safety checks at multiple clinical laboratories in 18 districts across the country. This action is the result of safety issues detected after procedural discrepancies were discovered in separate labs.
According to Radio New Zealand(RNZ), Health New Zealand found “significant risks” at some medical laboratories and that “staff at one in Auckland were exposed to toxic fumes, at others two [people] caught typhoid, and delays jeopardized patients’ care.”
“Two lab workers were hospitalized this year after having caught typhoid from samples, one at a private lab in Auckland, and a second at Canterbury Health Laboratories, CHL,” RNZ reported.
A Health New Zealand internal document states there will need to be a “comprehensive” fix to deal with risks present in the island nation’s medical laboratory industry. The assessment states that the organization needs “a more detailed picture of the occupational health and health and safety risks present in our laboratories,” RNZ reported.
“The overall state of the laboratories and the practices they have in place pose an inherited risk from the former DHBs [district health boards] and will likely need a comprehensive approach to addressing significant and/or ongoing risks,” Health New Zealand said in the internal document. “There is growing demand on our laboratories in terms of the volume of the work, which can put pressure on processes, and work is often undertaken in facilities that, over time, may have become not fit for purpose.”
This story as an example of how clinical laboratory staff can be exposed to disease and toxic chemicals when procedures are not diligently followed. It is a reminder to all lab managers that diligence in following protective protocols is imperative.
“Te Whatu Ora is committed to identifying, tracking and mitigating all potential risks and issues within our service until they are fully resolved and no longer identifiable as an issue/risk,” Rachel Haggerty (above), Director, Strategy, Planning and Purchasing, Hospital and Specialist Services, for Health New Zealand told NZ Doctor. Clinical laboratory workers in New Zealand have been striking for fair pay and safe working environments for months. Now, they risk becoming infected by deadly pathogens and chemicals as well. (Photo copyright: NZ Doctor.)
Lab Worker Strikes and Staff Shortages
Community Anatomic Pathology Services in Auckland lost its histology accreditation last year because it was discovered that lab workers were exposed to toxic chemical levels at the facility. In addition, patients were forced to wait weeks for test results from that lab.
The laboratory was also penalized back in 2017 for how substances were handled when formaldehyde levels in excess of the recommended limits were detected.
Bryan Raill, a medical scientist at the Counties Manukau District Health Board, said the laboratory workers union in New Zealand believes staff shortages and lab conditions are contributing to the lab woes. Raill is also president of the medical laboratory workers division of APEX, a specialist union representing more than 4,000 allied, scientific, and technical health professionals throughout New Zealand.
“It’s not only your physical environment, being safe there, but you have to be safe in terms of what you do,” Raill told RNZ.
Raill said the two typhoid infections were a red flag and that Te Whatu Ora needs to do more.
“They’re stepping out of the inertia they’ve been bound, so this is a good thing, but it needs to be a wider thing,” he said.
“They should look at the other health and safety aspect of the workload and the work environment that staff are working under,” Raill explained in an iHeart podcast. “The person who caught typhoid in Christchurch spent four days in ICU, and there had been a workplace exposure to another pathogen two years earlier and the recommendations that came out of that hadn’t been followed. For example, [the lab workers] were not vaccinated against typhoid.”
IT Implementation Delays also to Blame
Along with strikes and staff shortages, clinical laboratories in New Zealand are also dealing with information technology (IT) issues. Technical problems have delayed some needed lab upgrades by more than a year.
In addition, “The impacts of new test, surgeries, and medicines/treatments on pathology services have also historically not been understood well nor accounted for and we are considering a number of options, as outlined in the risk register, to manage this,” said Rachel Haggerty, Director, Strategy, Planning and Purchasing, Hospital and Specialist Services, for Te Whatu Ora.
Future efforts will deal with training of lab personnel and focus on ventilation and hazardous substance management.
Dark Daily has reported extensively on the ongoing problems within New Zealand clinical laboratory industry.
Clinical laboratory personnel can be exposed to dangerous diseases and toxic chemicals when procedures are not diligently followed. This latest situation in New Zealand serves as a reminder that following protective protocols is imperative in labs worldwide to protect workers and patients.
Findings suggest new medical guidelines may be needed to determine when to perform clinical laboratory cancer screenings on people under 50
From 1990-2019, new diagnoses of early-onset cancer in individuals under 50 years of age increased by 79%, according to a British Medical Journal (BMJ) news release describing research published last year in BMJ Oncology. The question for anatomic pathology laboratories to consider is, why are more people under 50 being diagnosed with cancer than in earlier years? And do medical guidelines need to be changed to allow more cancer screening for individuals under 50-years old?
This new revelation challenges previously held beliefs about the number of younger adults under 50 experiencing early-onset cancer. Patients can sometimes miss symptoms by attributing them to a more benign condition.
“While cancer tends to be more common in older people, the evidence suggests that cases among the under 50s have been rising in many parts of the world since the 1990s. But most of these studies have focused on regional and national differences; and few have looked at the issue from a global perspective or the risk factors for younger adults, say the researchers. In a bid to plug these knowledge gaps, they drew on data from the Global Burden of Disease 2019 Study for 29 cancers in 204 countries and regions,” the BMJ news release states.
According to the news release, “Breast cancer accounted for the highest number of ‘early-onset’ cases in this age group in 2019. But cancers of the windpipe (nasopharynx) and prostate have risen the fastest since 1990, the analysis reveals. Cancers exacting the heaviest death toll and compromising health the most among younger adults in 2019 were those of the breast, windpipe, lung, bowel, and stomach.”
Although these statistics are being seen worldwide, the highest rates are in North America, Australasia, and Western Europe. However, high death rates due to cancer are also being seen in Eastern Europe, Central Asia, and Oceania. Economic disparities in the latter geographical regions may account for both fewer diagnoses and higher death rates.
“And in low to middle income countries, early onset cancer had a much greater impact on women than on men, in terms of both deaths and subsequent poor health,” the BMJ news release noted.
In an editorial they published in BMJ Oncology on the study findings, Ashleigh Hamilton, PhD (left), Academic Clinical Lecturer, and Helen Coleman, PhD (right), Professor, School of Medicine, Dentistry and Biomedical Sciences, both at the Center for Public Health at Queen’s University Belfast in the UK wrote, “The epidemiological landscape of cancer incidence is changing. … Prevention and early detection measures are urgently required, along with identifying optimal treatment strategies for early-onset cancers, which should include a holistic approach addressing the unique supportive care needs of younger patients.” Anatomic pathology laboratories will play an important role in diagnosing and treating younger cancer patients. (Photo copyrights: Queen’s University Belfast.)
What Caused the Increase?
“It’s such an important question, and it points to the need for more research in all kinds of domains—in population science, behavioral health, public health, and basic science as well,” said medical oncologist Veda Giri, MD, Professor of Internal Medicine, Yale School of Medicine, in a news release. Giri directs the Yale Cancer Center Early-Onset Cancer Program at Smilow Cancer Hospital.
Although experts are still trying to determine exactly where these cases are coming from, signs point to both genetic and lifestyle factors, the BMJ news releases noted. Tobacco and alcohol use, diets high in cholesterol and sodium, and physical inactivity are all lifestyle risk factors. Experts recommend a healthy diet and exercise routine with minimal alcohol consumption.
As for family history? “We’re beginning to recognize that family history is very important,” says Jeremy Kortmansky, MD, also a Yale Medicine medical oncologist.
According to CNN Health, these rates of early-onset cancer are more common in female patients, with rates going up an average of 0.67% each year.
“For young women who have a significant family history of cancer in the family, we are starting to refer them to a high-risk clinic—even if the cancer in their family is not breast cancer,” Kortmansky noted.
Doctors advise patients to implement healthy habits into their lives, not ignore symptoms, advocate for themselves, and be aware of their family history. Cancer patients may be prescribed cancer treatments at a much earlier age. Medical guidelines for patients may continue to shift and change. And oncologists may be incorporating alternative therapies to help younger patients deal with the shock of their diagnosis.
Will Cancer Rates Continue to Rise?
“Based on the observed trends for the past three decades, the researchers estimate that the global number of new early-onset cancer cases and associated deaths will rise by a further 31% and 21% respectively in 2030, with those in their 40s the most at risk,” the BMJ news release noted.
In an editorial they penned for BMJ Oncology on the findings of the cancer study titled, “Shifting Tides: The Rising Tide of Early-Onset Cancers Demands Attention,” Ashleigh Hamilton, PhD, Academic Clinical Lecturer, and Helen Coleman, PhD, Professor, School of Medicine, Dentistry and Biomedical Sciences, both at the Center for Public Health at Queen’s University Belfast in the UK wrote, “Full understanding of the reasons driving the observed trends remains elusive, although lifestyle factors are likely contributing, and novel areas of research such as antibiotic usage, the gut microbiome, outdoor air pollution, and early life exposures are being explored. It is crucial that we better understand the underlying reasons for the increase in early-onset cancers, in order to inform prevention strategies.”
Clinical laboratories should be aware of these findings and the changing landscape of cancer screenings, as they will play a key role in diagnoses. Younger patients may be advocating for cancer screenings and doctors may be ordering them depending on the patient’s symptoms and family history. Anatomic pathology professionals should expect new guidelines when it comes to cancer diagnostics and treatment.
Some hospital organizations are pushing back, stating that the new regulations are ‘too rigid’ and interfere with doctors’ treatment of patients
In August, the Biden administration finalized provisions for hospitals to meet specific treatment metrics for all patients with suspected sepsis. Hospitals that fail to meet these requirements risk the potential loss of millions of dollars in Medicare reimbursements annually. This new federal rule did not go over well with some in the hospital industry.
Sepsis kills about 350,000 people every year. One in three people who contract the deadly blood infection in hospitals die, according to the Centers for Disease Control and Prevention (CDC). Thus, the federal government has once again implemented a final rule that requires hospitals, clinical laboratories, and medical providers to take immediate actions to diagnose and treat sepsis patients.
The effort has elicited pushback from several healthcare organizations that say the measure is “too rigid” and “does not allow clinicians flexibility to determine how recommendations should apply to their specific patients,” according to Becker’s Hospital Review.
Perform blood tests within a specific period of time to look for biomarkers in patients that may indicate sepsis, and to
Administer antibiotics within three hours after a possible case is identified.
It also mandates that certain other tests are performed, and intravenous fluids administered, to prevent blood pressure from dipping to dangerously low levels.
“These are core things that everyone should do every time they see a septic patient,” said Steven Simpson, MD, Professor of medicine at the University of Kansas told Fierce Healthcare. Simpson is also the chairman of the Sepsis Alliance, an advocacy group that works to battle sepsis.
Simpson believes there is enough evidence to prove that the SEP-1 guidelines result in improved patient care and outcomes and should be enforced.
“It is quite clear that this works better than what was present before, which was nothing,” he said. “If the current sepsis mortality rate could be cut by even 5%, we could save a lot of lives. Before, even if you were reporting 0% compliance, you didn’t lose your money. Now you actually have to do it,” Simpson noted.
“We are encouraged by the increased attention to sepsis and support CMS’ creation of a sepsis mortality measure that will encourage hospitals to pay more attention to the full breadth of sepsis care,” Chanu Rhee, MD (above), Infectious Disease/Critical Care Physician and Associate Hospital Epidemiologist at Brigham and Women’s Hospital told Healthcare Finance. The new rule, however, requires doctors and medical laboratories to conduct tests and administer antibiotic treatment sooner than many healthcare providers deem wise. (Photo copyright: Brigham and Women’s Hospital.)
Healthcare Organizations Pushback against Final Rule
“By encouraging the use of broad spectrum antibiotics when more targeted ones will suffice, this measure promotes the overuse of the antibiotics that are our last line of defense against drug-resistant bacteria,” the AHA’s letter states.
In its recent coverage of the healthcare organizations’ pushback to CMS’ final rule, Healthcare Finance News explained, “The SEP-1 measure requires clinicians to provide a bundle of care to all patients with possible sepsis within three hours of recognition. … But the SEP-1 measure doesn’t take into account that many serious conditions present in a similar fashion to sepsis … Pushing clinicians to treat all these patients as if they have sepsis … leads to overuse of broad-spectrum antibiotics, which can be harmful to patients who are not infected, those who are infected with viruses rather than bacteria, and those who could safely be treated with narrower-spectrum antibiotics.”
CMS’ latest rule follows the same evolutionary path as previous federal guidelines. In August 2007, CMS announced that Medicare would no longer pay for additional costs associated with preventable errors, including situations known as Never Events. These are “adverse events that are serious, largely preventable, and of concern to both the public and healthcare providers for the purpose of public accountability,” according to the Leapfrog Group.
In 2014, the CDC suggested that all US hospitals have an antibiotic stewardship program (ASP) to measure and improve how antibiotics are prescribed by clinicians and utilized by patients.
Research Does Not Show Federal Sepsis Programs Work
He points to analysis which showed that though use of broad-spectrum antibiotics increased after the original 2015 SEP-1 regulations were introduced, there has been little change to patient outcomes.
“Unfortunately, we do not have good evidence that implementation of the sepsis policy has led to an improvement in sepsis mortality rates,” Rhee told Fierce Healthcare.
Rhee believes that the latest regulations are a step in the right direction, but that more needs to be done for sepsis care. “Retiring past measures and refining future ones will help stimulate new innovations in diagnosis and treatment and ultimately improve outcomes for the many patients affected by sepsis,” he told Healthcare Finance.
Sepsis is very difficult to diagnose quickly and accurately. Delaying treatment could result in serious consequences. But clinical laboratory blood tests for blood infections can take up to three days to produce a result. During that time, a patient could be receiving the wrong antibiotic for the infection, which could lead to worse problems.
The new federal regulation is designed to ensure that patients receive the best care possible when dealing with sepsis and to lower mortality rates in those patients. It remains to be seen if it will have the desired effect.
Radiological method using AI algorithms to detect, locate, and identify cancer could negate the need for invasive, painful clinical laboratory testing of tissue biopsies
This will be of interest to histopathologists and radiologist technologists who are working to develop AI deep learning algorithms to read computed tomography scans (CT scans) to speed diagnosis and treatment of cancer patients.
“Researchers used the CT scans of 170 patients treated at The Royal Marsden with the two most common forms of retroperitoneal sarcoma (RPS)—leiomyosarcoma and liposarcoma—to create an AI algorithm, which was then tested on nearly 90 patients from centers across Europe and the US,” the news release notes.
The researchers then “used a technique called radiomics to analyze the CT scan data, which can extract information about the patient’s disease from medical images, including data which can’t be distinguished by the human eye,” the new release states.
The research team sought to make improvements with this type of cancer because these tumors have “a poor prognosis, upfront characterization of the tumor is difficult, and under-grading is common,” they wrote. The fact that AI reading of CT scans is a non-invasive procedure is major benefit, they added.
“This is the largest and most robust study to date that has successfully developed and tested an AI model aimed at improving the diagnosis and grading of retroperitoneal sarcoma using data from CT scans,” said the study’s lead oncology radiologist Christina Messiou, MD, (above), Consultant Radiologist at The Royal Marsden NHS Foundation Trust and Professor in Imaging for Personalized Oncology at The Institute of Cancer Research, London, in a news release. Invasive medical laboratory testing of cancer biopsies may eventually become a thing of the past if this research becomes clinically available for oncology diagnosis. (Photo copyright: The Royal Marsden.)
Study Details
RPS is a relatively difficult cancer to spot, let alone diagnose. It is a rare form of soft-tissue cancer “with approximately 8,600 new cases diagnosed annually in the United States—less than 1% of all newly diagnosed malignancies,” according to Brigham and Women’s Hospital.
In their published study, the UK researchers noted that, “Although more than 50 soft tissue sarcoma radiomics studies have been completed, few include retroperitoneal sarcomas, and the majority use single-center datasets without independent validation. The limited interpretation of the quantitative radiological phenotype in retroperitoneal sarcomas and its association with tumor biology is a missed opportunity.”
According to the ICR news release, “The [AI] model accurately graded the risk—or how aggressive a tumor is likely to be—[in] 82% of the tumors analyzed, while only 44% were correctly graded using a biopsy.”
Additionally, “The [AI] model also accurately predicted the disease type [in] 84% of the sarcomas tested—meaning it can effectively differentiate between leiomyosarcoma and liposarcoma—compared with radiologists who were not able to diagnose 35% of the cases,” the news release states.
“There is an urgent need to improve the diagnosis and treatment of patients with retroperitoneal sarcoma, who currently have poor outcomes,” said the study’s first author Amani Arthur, PhD, Clinical Research Fellow at The Institute of Cancer Research, London, and Registrar at The Royal Marsden NHS Foundation Trust, in the ICR news release.
“The disease is very rare—clinicians may only see one or two cases in their career—which means diagnosis can be slow. This type of sarcoma is also difficult to treat as it can grow to large sizes and, due to the tumor’s location in the abdomen, involve complex surgery,” she continued. “Through this early research, we’ve developed an innovative AI tool using imaging data that could help us more accurately and quickly identify the type and grade of retroperitoneal sarcomas than current methods. This could improve patient outcomes by helping to speed up diagnosis of the disease, and better tailor treatment by reliably identifying the risk of each patient’s disease.
“In the next phase of the study, we will test this model in clinic on patients with potential retroperitoneal sarcomas to see if it can accurately characterize their disease and measure the performance of the technology over time,” Arthur added.
Importance of Study Findings
Speed of detection is key to successful cancer diagnoses, noted Richard Davidson, Chief Executive of Sarcoma UK, a bone and soft tissue cancer charity.
“People are more likely to survive sarcoma if their cancer is diagnosed early—when treatments can be effective and before the sarcoma has spread to other parts of the body. One in six people with sarcoma cancer wait more than a year to receive an accurate diagnosis, so any research that helps patients receive better treatment, care, information and support is welcome,” he told The Guardian.
According to the World Health Organization, cancer kills about 10 million people worldwide every year. Acquisition and medical laboratory testing of tissue biopsies is both painful to patients and time consuming. Thus, a non-invasive method of diagnosing deadly cancers quickly, accurately, and early would be a boon to oncology practices worldwide and could save thousands of lives each year.