The hacker collective known as the Dark Overlord first surfaced in June 2016, when it advertised more than 600,000 patient files from three U.S. healthcare organizations for sale on the dark web. The group, which also attempted to extort ransom from its victims, soon offered another 9 million records pilfered from health insurance companies and provider networks across the country.
Since 2009, federal regulators have counted nearly 5,000 major data breaches in the United States alone, affecting some 260 million individuals.
Last October, apparently seeking publicity as well as cash, the hackers stole a trove of potentially scandalous data from a celebrity plastic surgery clinic in London—including photos of in-progress genitalia- and breast-enhancement surgeries. "We have TBs [terabytes] of this shit. Databases, names, everything," a gang representative told a reporter. "There are some royal families in here."
Bandits like these are prowling healthcare's digital highways in growing numbers. Since 2009, federal regulators have counted nearly 5,000 major data breaches in the United States alone, affecting some 260 million individuals. Although hacker incidents represent less than 20 percent of the total breaches, they account for almost 80 percent of the affected patients. Such attacks expose patients to potential blackmail or identity theft, enable criminals to commit medical fraud or file false tax returns, and may even allow hostile state actors to sabotage electric grids or other infrastructure by e-mailing employees malware disguised as medical notices. According to the consulting agency Accenture, data theft will cost the healthcare industry $305 billion between 2015 and 2019, with annual totals doubling from $40 billion to $80 billion.
Blockchain could put patients in control of their own data, empowering them to access, share, and even sell their medical information as they see fit.
One possible solution to this crisis involves radically retooling the way healthcare data is stored and shared—by using blockchain, the still-emerging information technology that underlies cryptocurrencies such as Bitcoin. And blockchain-enabled IT systems, boosters say, could do much more than prevent the theft of medical data. Such networks could revolutionize healthcare delivery on many levels, creating efficiencies that would reduce medical errors, improve coordination between providers, drive down costs, and give researchers unprecedented insights into patterns of disease. Perhaps most transformative, blockchain could put patients in control of their own data, empowering them to access, share, and even sell their medical information as they see fit. Widespread adoption could result in "a new kind of healthcare economy, in which data and services are quantifiable and exchangeable, with strong guarantees around both the security and privacy of sensitive information," wrote W. Brian Smith, chief scientist of healthcare-blockchain startup PokitDok, in a recent white paper.
Around the world, entrepreneurs, corporations, and government agencies are hopping aboard the blockchain train. A survey by the IBM Institute for Business Value, released in late 2016, found that 16 percent of healthcare executives in 16 countries planned to begin implementing some form of the technology in the coming year; 90 percent planned to launch a pilot program in the next two years. In 2017, Estonia became the first country to switch its medical-records system to a blockchain-based framework. Great Britain and Dubai are exploring a similar move. Yet in countries with more fragmented health systems, most notably the U.S., the challenges remain formidable. Some of the most advanced healthcare applications envisioned for blockchain, moreover, raise technological and ethical questions whose answers may not arrive anytime soon.
By creating a detailed, comprehensive, and immutable timeline of medical transactions, blockchain-based recordkeeping could help providers gauge a patient's long-term health patterns in a way that's never before been possible.
What Exactly Is Blockchain, Anyway?
To understand the buzz around blockchain, it's necessary to grasp (at least loosely) how the technology works. Ordinary digital recordkeeping systems rely on a central administrator that acts as gatekeeper to a treasury of data; if you can sneak past the guard, you can often gain access to the entire hoard, and your intrusion may go undetected indefinitely. Blockchain, by contrast, employs a network of synchronized, replicated databases. Information is scattered among these nodes, rather than on a single server, and is exchanged through encrypted, peer-to-peer pathways. Each transaction is visible to every computer on the network, and must be approved by a majority in order to be successfully completed. Each batch of transactions, or "block," is date- and time-stamped, marked with the user's identity, and given a cryptographic code, which is posted to every node. These blocks form a "chain," preserved in an electronic ledger, that can be read by all users but can't be edited. Any unauthorized access, or attempt at tampering, can be quickly neutralized by these overlapping safeguards. Even if a hacker managed to break into the system, penetrating deeply would be extraordinarily difficult.
Because blockchain technology shares transaction records throughout a network, it could eliminate communication bottlenecks between different components of the healthcare system (primary care physicians, specialists, nurses, and so on). And because blockchain-based systems are designed to incorporate programs known as "smart contracts," which automate functions previously requiring human intervention, they could reduce dangerous slipups as well as tedious and costly paperwork. For example, when a patient gets a checkup, sees a specialist, and fills a prescription, all these actions could be automatically recorded on his or her electronic health record (EHR), checked for errors, submitted for billing, and entered on insurance claims—which could be adjudicated and reimbursed automatically as well. "Blockchain has the potential to remove a lot of intermediaries from existing workflows, whether digital or nondigital," says Kamaljit Behera, an industry analyst for the consulting firm Frost & Sullivan.
The possible upsides don't end there. By creating a detailed, comprehensive, and immutable timeline of medical transactions, blockchain-based recordkeeping could help providers gauge a patient's long-term health patterns in a way that's never before been possible. In addition to data entered by their caregivers, individuals could use app-based technologies or wearables to transmit other information to their records, such as diet, exercise, and sleep patterns, adding new depth to their medical portraits.
Many experts expect healthcare blockchain to take root more slowly in the U.S. than in nations with government-run national health services.
Smart contracts could also allow patients to specify who has access to their data. "If you get an MRI and want your orthopedist to see it, you can add him to your network instead of carrying a CD into his office," explains Andrew Lippman, associate director of the MIT Media Lab, who helped create a prototype healthcare blockchain system called MedRec that's currently being tested at Beth Israel Deaconess Hospital in Boston. "Or you might make a smart contract to allow your son or daughter to access your healthcare records if something happens to you." Another option: permitting researchers to analyze your data for scientific purposes, whether anonymously or with your name attached.
The Recent History, and Looking Ahead
Over the past two years, a crowd of startups has begun vying for a piece of the emerging healthcare blockchain market. Some, like PokitDok and Atlanta-based Patientory, plan to mint proprietary cryptocurrencies, which investors can buy in lieu of stock, medical providers may earn as a reward for achieving better outcomes, and patients might score for meeting wellness goals or participating in clinical trials. (Patientory's initial coin offering, or ICO, raised more than $7 million in three days.) Several fledgling healthcare-blockchain companies have found powerful corporate partners: Intel for Silicon Valley's PokitDok, Kaiser Permanente for Patientory, Philips for Los Angeles-based Gem Health. At least one established provider network, Change Healthcare, is developing blockchain-based systems of its own. Two months ago, Change launched what it calls the first "enterprise-scale" blockchain network in U.S. healthcare—a system to track insurance claim submissions and remittances.
No one, however, has set a roll-out date for a full-blown, blockchain-based EHR system in this country. "We have yet to see anything move from the pilot phase to some kind of production status," says Debbie Bucci, an IT architect in the federal government's Office of the National Coordinator for Health Information Technology. Indeed, many experts expect healthcare blockchain to take root more slowly here than in nations with government-run national health services. In America, a typical patient may have dealings with a family doctor who keeps everything on paper, an assortment of hospitals that use different EHR systems, and an insurer whose system for processing claims is separate from that of the healthcare providers. To help bridge these gaps, a consortium called the Hyperledger Healthcare Working Group (which includes many of the leading players in the field) is developing standard protocols for blockchain interoperability and other functions. Adding to the complexity is the federal Health Insurance and Portability Act (HIPAA), which governs who can access patient data and under what circumstances. "Healthcare blockchain is in a very nascent stage," says Behera. "Coming up with regulations and other guidelines, and achieving large-scale implementation, will take some time."
The ethical implications of buying and selling personal genomic data in an electronic marketplace are doubtless open to debate.
How long? Behera, like other analysts, estimates that relatively simple applications, such as revenue-cycle management systems, could become commonplace in the next five years. More ambitious efforts might reach fruition in a decade or so. But once the infrastructure for healthcare blockchain is fully established, its uses could go far beyond keeping better EHRs.
A handful of scientists and entrepreneurs are already working to develop one visionary application: managing genomic data. Last month, Harvard University geneticist George Church—one of the most influential figures in his discipline—launched a business called Nebula Genomics. It aims to set up an exchange in which individuals can use "Neptune tokens" to purchase DNA sequencing, which will be stored in the company's blockchain-based system; research groups will be able to pay clients for their data using the same cryptocurrency. Luna DNA, founded by a team of biotech veterans in San Diego, plans a similar service, as does a Moscow-based startup called the Zenome Project.
Hossein Rahnama, CEO of the mobile-tech company Flybits and director of research at the Ryerson Centre for Cloud and Context-Aware Computing in Toronto, envisions a more personalized way of sharing genomic data via blockchain. His firm is working with a U.S. insurance company to develop a service that would allow clients in their 20s and 30s to connect with people in their 70s or 80s with similar genomes. The young clients would learn how the elders' lifestyle choices had influenced their health, so that they could modify their own habits accordingly. "It's intergenerational wisdom-sharing," explains Rahnama, who is 38. "I would actually pay to be a part of that network."
The ethical implications of buying and selling personal genomic data in an electronic marketplace are doubtless open to debate. Such commerce could greatly expand the pool of subjects for research in many areas of medicine, enabling the kinds of breakthroughs that only Big Data can provide. Yet it could also lead millions to surrender the most private information of all—the secrets of their cells—to buyers with less benign intentions. The Dark Overlord, one might argue, could not hope for a more satisfying victory.
These scenarios, however, are pure conjecture. After the first web page was posted, in 1991, Lippman observes, "a whole universe developed that you couldn't have imagined on Day 1." The same, he adds, is likely true for healthcare blockchain. "Our vision is to make medical records useful for you and for society, and to give you more control over your own identity. Time will tell."
In early 2020, Moderna Inc. was a barely-known biotechnology company with an unproven approach. It wanted to produce messenger RNA molecules to carry instructions into the body, teaching it to ward off disease. Experts doubted the Boston-based company would meet success.
Today, Moderna is a pharmaceutical power thanks to its success developing an effective Covid-19 vaccine. The company is worth $124 billion, more than giants including GlaxoSmithKline and Sanofi, and evidence has emerged that Moderna's shots are more protective than those produced by Pfizer-BioNTech and other vaccine makers. Pressure is building on the company to deliver more of its doses to people around the world, especially in poorer countries, and Moderna is working on vaccines against other pathogens, including Zika, influenza and cytomegalovirus.
But Moderna encountered such difficulties over the course of its eleven-year history that some executives worried it wouldn't survive. Two unlikely scientists helped save the company. Their breakthroughs paved the way for Moderna's Covid-19 shots but their work has never been publicized nor have their contributions been properly appreciated.
Derrick Rossi, a scientist at MIT, and Noubar Afeyan, a Cambridge-based investor, launched Moderna in September 2010. Their idea was to create mRNA molecules capable of delivering instructions to the body's cells, directing them to make proteins to heal ailments and cure disease. Need a statin, immunosuppressive, or other drug or vaccine? Just use mRNA to send a message to the body's cells to produce it. Rossi and Afeyan were convinced injecting mRNA into the body could turn it into its own laboratory, generating specific medications or vaccines as needed.
At the time, the notion that one might be able to teach the body to make proteins bordered on heresy. Everyone knew mRNA was unstable and set off the body's immune system on its way into cells. But in the late 2000's, two scientists at the University of Pennsylvania, Katalin Karikó and Drew Weissman, had figured out how to modify mRNA's chemical building blocks so the molecule could escape the notice of the immune system and enter the cell. Rossi and Afeyan couldn't convince the University of Pennsylvania to license Karikó and Weissman's patent, however, stymying Moderna's early ambitions. At the same time, the Penn scientists' technique seemed more applicable to an academic lab than a biotech company that needed to produce drugs or shots consistently and in bulk. Rossi and Afeyan's new company needed their own solution to help mRNA evade the body's defenses.
Some of Moderna's founders doubted Schrum could find success and they worried if their venture was doomed from the start.
The Scientist Who Modified mRNA: Jason Schrum
In 2010, Afeyan's firm subleased laboratory space in the basement of another Cambridge biotech company to begin scientific work. Afeyan chose a young scientist on his staff, Jason Schrum, to be Moderna's first employee, charging him with getting mRNA into cells without relying on Karikó and Weissman's solutions.
Schrum seemed well suited for the task. Months earlier, he had received a PhD in biological chemistry at Harvard University, where he had focused on nucleotide chemistry. Schrum even had the look of someone who might do big things. The baby-faced twenty-eight-year-old favored a relaxed, start-up look: khakis, button-downs, and Converse All-Stars.
Schrum felt immediate strain, however. He hadn't told anyone, but he was dealing with intense pain in his hands and joints, a condition that later would be diagnosed as degenerative arthritis. Soon Schrum couldn't bend two fingers on his left hand, making lab work difficult. He joined a drug trial, but the medicine proved useless. Schrum tried corticosteroid injections and anti-inflammatory drugs, but his left hand ached, restricting his experiments.
"It just wasn't useful," Schrum says, referring to his tender hand.
He persisted, nonetheless. Each day in the fall of 2010, Schrum walked through double air-locked doors into a sterile "clean room" before entering a basement laboratory, in the bowels of an office in Cambridge's Kendall Square neighborhood, where he worked deep into the night. Schrum searched for potential modifications of mRNA nucleosides, hoping they might enable the molecule to produce proteins. Like all such rooms, there were no windows, so Schrum had to check a clock to know if it was day or night. A colleague came to visit once in a while, but most of the time, Schrum was alone.
Some of Moderna's founders doubted Schrum could find success and they worried if their venture was doomed from the start. An established MIT scientist turned down a job with the start-up to join pharmaceutical giant Novartis, dubious of Moderna's approach. Colleagues wondered if mRNA could produce proteins, at least on a consistent basis.
As Schrum began testing the modifications in January 2011, he made an unexpected discovery. Karikó and Weissman saw that by turned one of the building blocks for mRNA, a ribonucleoside called uridine, into a slightly different form called pseudouridine, the cell's immune system ignored the mRNA and the molecule avoided an immune response. After a series of experiments in the basement lab, Schrum discovered that a variant of pseudouridine called N1- methyl-pseudouridine did an even better job reducing the cell's innate immune response. Schrum's nucleoside switch enabled even higher protein production than Karikó and Weissman had generated, and Schrum's mRNAs lasted longer than either unmodified molecules or the modified mRNA the Penn academics had used, startling the young researcher. Working alone in a dreary basement and through intense pain, he had actually improved on the Penn professors' work.
Years later, Karikó and Weissman who would win acclaim. In September 2021, the scientists were awarded the Lasker-DeBakey Clinical Medical Research Award. Some predict they eventually will win a Nobel prize. But it would be Schrum's innovation that would form the backbone of both Moderna and Pfizer-BioNTech's Covid-19 vaccine, not the chemical modifications that Karikó and Weissman developed. For Schrum, necessity had truly been the mother of invention.
The Scientist Who Solved Delivery: Kerry Benenato
For several years, Moderna would make slow progress developing drugs to treat various diseases. Eventually, the company decided that mRNA was likely better suited for vaccines. By 2017, Moderna and the National Institutes of Health were discussing working together to develop mRNA–based vaccines, a partnership that buoyed Moderna's executives. There remained a huge obstacle in Moderna's way, however. It was up to Kerry Benenato to find a solution.
Benenato received an early hint of the hurdle in front of her three years earlier, when the organic chemist was first hired. When a colleague gave her a company tour, she was introduced to Moderna's chief scientific officer, Joseph Bolen, who seemed unusually excited to meet her.
"Oh, great!" Bolen said with a smile. "She's the one who's gonna solve delivery."
Bolen gave a hearty laugh and walked away, but Benenato detected seriousness in his quip.
It was a lot to expect from a 37-year-old scientist already dealing with insecurities and self-doubt. Benenato was an accomplished researcher who most recently had worked at AstraZeneca after completing post-doctoral studies at Harvard University. Despite her impressive credentials, Benenato battled a lack of confidence that sometimes got in her way. Performance reviews from past employers had been positive, but they usually produced similar critiques: Be more vocal. Do a better job advocating for your ideas. Give us more, Kerry.
Benenato was petite and soft-spoken. She sometimes stuttered or relied on "ums" and "ahs" when she became nervous, especially in front of groups, part of why she sometimes didn't feel comfortable speaking up.
"I'm an introvert," she says. "Self-confidence is something that's always been an issue."
To Benenato, Moderna's vaccine approach seemed promising—the team was packaging mRNAs in microscopic fatty-acid compounds called lipid nanoparticles, or LNPs, that protected the molecules on their way into cells. Moderna's shots should have been producing ample and long-lasting proteins. But the company's scientists were alarmed—they were injecting shots deep into the muscle of mice, but their immune systems were mounting spirited responses to the foreign components of the LNPs, which had been developed by a Canadian company.
This toxicity was a huge issue: A vaccine or drug that caused sharp pain and awful fevers wasn't going to prove very popular. The Moderna team was in a bind: Its mRNA had to be wrapped in the fatty nanoparticles to have a chance at producing plentiful proteins, but the body wasn't tolerating the microscopic encasements, especially upon repeated dosing.
The company's scientists had done everything they could to try to make the molecule's swathing material disappear soon after entering the cells, in order to avoid the unfortunate side effects, such as chills and headaches, but they weren't making headway. Frustration mounted. Somehow, the researchers had to find a way to get the encasements—made of little balls of fat, cholesterol, and other substances—to deliver their payload mRNA and then quickly vanish, like a parent dropping a teenager off at a party, to avoid setting off the immune system in unpleasant ways, even as the RNA and the proteins the molecule created stuck around.
Benenato wasn't entirely shocked by the challenges Moderna was facing. One of the reasons she had joined the upstart company was to help develop its delivery technology. She just didn't realize how pressing the issue was, or how stymied the researchers had become. Benenato also didn't know that Moderna board members were among those most discouraged by the delivery issue. In meetings, some of them pointed out that pharmaceutical giants like Roche Holding and Novartis had worked on similar issues and hadn't managed to develop lipid nanoparticles that were both effective and well tolerated by the body. Why would Moderna have any more luck?
Stephen Hoge insisted the company could yet find a solution.
"There's no way the only innovations in LNP are going to come from some academics and a small Canadian company," insisted Hoge, who had convinced the executives that hiring Benenato might help deliver an answer.
Benenato realized that while Moderna might have been a hot Boston-area start- up, it wasn't set up to do the chemistry necessary to solve their LNP problem. Much of its equipment was old or secondhand, and it was the kind used to tinker with mRNAs, not lipids.
"It was scary," she says.
When Benenato saw the company had a nuclear magnetic resonance spectrometer, which allows chemists to see the molecular structure of material, she let out a sigh of relief. Then Benenato inspected the machine and realized it was a jalopy. The hulking, aging instrument had been decommissioned and left behind by a previous tenant, too old and banged up to bring with them.
Benenato began experimenting with different chemical changes for Moderna's LNPs, but without a working spectrometer she and her colleagues had to have samples ready by noon each day, so they could be picked up by an outside company that would perform the necessary analysis. After a few weeks, her superiors received an enormous bill for the outsourced work and decided to pay to get the old spectrometer running again.
After months of futility, Benenato became impatient. An overachiever who could be hard on herself, she was eager to impress her new bosses. Benenato felt pressure outside the office, as well. She was married with a preschool-age daughter and an eighteen-month-old son. In her last job, Benenato's commute had been a twenty-minute trip to Astra-Zeneca's office in Waltham, outside Boston; now she was traveling an hour to Moderna's Cambridge offices. She became anxious—how was she going to devote the long hours she realized were necessary to solve their LNP quandary while providing her children proper care? Joining Moderna was beginning to feel like a possible mistake.
She turned to her husband and father for help. They reminded her of the hard work she had devoted to establishing her career and said it would be a shame if she couldn't take on the new challenge. Benenato's husband said he was happy to stay home with the kids, alleviating some of her concerns.
Back in the office, she got to work. She wanted to make lipids that were easier for the body to chop into smaller pieces, so they could be eliminated by the body's enzymes. Until then, Moderna, like most others, relied on all kinds of complicated chemicals to hold its LNP packaging together. They weren't natural, though, so the body was having a hard time breaking them down, causing the toxicity.
Benenato began experimenting with simpler chemicals. She inserted "ester bonds"—compounds referred to in chemical circles as "handles" because the body easily grabs them and breaks them apart. Ester bonds had two things going for them: They were strong enough to help ensure the LNP remained stable, acting much like a drop of oil in water, but they also gave the body's enzymes something to target and break down as soon as the LNP entered the cell, a way to quickly rid the body of the potentially toxic LNP components. Benenato thought the inclusion of these chemicals might speed the elimination of the LNP delivery material.
This idea, Benenato realized, was nothing more than traditional, medicinal chemistry. Most people didn't use ester bonds because they were pretty unsophisticated. But, hey, the tricky stuff wasn't working, so Benenato thought she'd see if the simple stuff worked.
Benenato also wanted to try to replace a group of unnatural chemicals in the LNP that was contributing to the spirited and unwelcome response from the immune system. Benenato set out to build a new and improved chemical combination. She began with ethanolamine, a colorless, natural chemical, an obvious start for any chemist hoping to build a more complex chemical combination. No one relied on ethanolamine on its own.
Benenato was curious, though. What would happen if she used just these two simple modifications to the LNP: ethanolamine with the ester bonds? Right away, Benenato noticed her new, super-simple compound helped mRNA create some protein in animals. It wasn't much, but it was a surprising and positive sign. Benenato spent over a year refining her solution, testing more than one hundred variations, all using ethanolamine and ester bonds, showing improvements with each new version of LNP. After finishing her 102nd version of the lipid molecule, which she named SM102, Benenato was confident enough in her work to show it to Hoge and others.
They immediately got excited. The team kept tweaking the composition of the lipid encasement. In 2017, they wrapped it around mRNA molecules and injected the new combination in mice and then monkeys. They saw plentiful, potent proteins were being produced and the lipids were quickly being eliminated, just as Benenato and her colleagues had hoped. Moderna had its special sauce.
That year, Benenato was asked to deliver a presentation to Stephane Bancel, Moderna's chief executive, Afeyan, and Moderna's executive committee to explain why it made sense to use the new, simpler LNP formulation for all its mRNA vaccines. She still needed approval from the executives to make the change. Ahead of the meeting, she was apprehensive, as some of her earlier anxieties returned. But an unusual calm came over her as she began speaking to the group. Benenato explained how experimenting with basic, overlooked chemicals had led to her discovery.
She said she had merely stumbled onto the company's solution, though her bosses understood the efforts that had been necessary for the breakthrough. The board complimented her work and agreed with the idea of switching to the new LNP. Benenato beamed with pride.
"As a scientist, serendipity has been my best friend," she told the executives.
Over the next few years, Benenato and her colleagues would improve on their methods and develop even more tolerable and potent LNP encasement for mRNA molecules. Their work enabled Moderna to include higher doses of vaccine in its shots. In early 2020, Moderna developed Covid-19 shots that included 100 micrograms of vaccine, compared with 30 micrograms in the Pfizer-BioNTech vaccine. That difference appears to help the Moderna vaccine generate higher titers and provide more protection.
"You set out in a career in drug discovery to want to make a difference," Benenato says. "Seeing it come to reality has been surreal and emotional."
Editor's Note: This essay is excerpted from A SHOT TO SAVE THE WORLD: The Inside Story of the Life-or-Death Race for a COVID-19 Vaccine by Gregory Zuckerman, now on sale from Portfolio/Penguin.
In just 100 years, scientific breakthroughs could completely transform humanity and our planet for the better. Here's a glimpse at what our future may hold.
The Next 100 Years of Scientific Progress
Kira Peikoff is the editor-in-chief of Leaps.org. As a journalist, her work has appeared in The New York Times, Newsweek, Nautilus, Popular Mechanics, The New York Academy of Sciences, and other outlets. She is also the author of four suspense novels that explore controversial issues arising from scientific innovation: Living Proof, No Time to Die, Die Again Tomorrow, and Mother Knows Best. Peikoff holds a B.A. in Journalism from New York University and an M.S. in Bioethics from Columbia University. She lives in New Jersey with her husband and two young sons. Follow her on Twitter @KiraPeikoff.