The hacker collective known as the Dark Overlord first surfaced in June 2016, when it advertised more than 600,000 patient files from three U.S. healthcare organizations for sale on the dark web. The group, which also attempted to extort ransom from its victims, soon offered another 9 million records pilfered from health insurance companies and provider networks across the country.
Since 2009, federal regulators have counted nearly 5,000 major data breaches in the United States alone, affecting some 260 million individuals.
Last October, apparently seeking publicity as well as cash, the hackers stole a trove of potentially scandalous data from a celebrity plastic surgery clinic in London—including photos of in-progress genitalia- and breast-enhancement surgeries. "We have TBs [terabytes] of this shit. Databases, names, everything," a gang representative told a reporter. "There are some royal families in here."
Bandits like these are prowling healthcare's digital highways in growing numbers. Since 2009, federal regulators have counted nearly 5,000 major data breaches in the United States alone, affecting some 260 million individuals. Although hacker incidents represent less than 20 percent of the total breaches, they account for almost 80 percent of the affected patients. Such attacks expose patients to potential blackmail or identity theft, enable criminals to commit medical fraud or file false tax returns, and may even allow hostile state actors to sabotage electric grids or other infrastructure by e-mailing employees malware disguised as medical notices. According to the consulting agency Accenture, data theft will cost the healthcare industry $305 billion between 2015 and 2019, with annual totals doubling from $40 billion to $80 billion.
Blockchain could put patients in control of their own data, empowering them to access, share, and even sell their medical information as they see fit.
One possible solution to this crisis involves radically retooling the way healthcare data is stored and shared—by using blockchain, the still-emerging information technology that underlies cryptocurrencies such as Bitcoin. And blockchain-enabled IT systems, boosters say, could do much more than prevent the theft of medical data. Such networks could revolutionize healthcare delivery on many levels, creating efficiencies that would reduce medical errors, improve coordination between providers, drive down costs, and give researchers unprecedented insights into patterns of disease. Perhaps most transformative, blockchain could put patients in control of their own data, empowering them to access, share, and even sell their medical information as they see fit. Widespread adoption could result in "a new kind of healthcare economy, in which data and services are quantifiable and exchangeable, with strong guarantees around both the security and privacy of sensitive information," wrote W. Brian Smith, chief scientist of healthcare-blockchain startup PokitDok, in a recent white paper.
Around the world, entrepreneurs, corporations, and government agencies are hopping aboard the blockchain train. A survey by the IBM Institute for Business Value, released in late 2016, found that 16 percent of healthcare executives in 16 countries planned to begin implementing some form of the technology in the coming year; 90 percent planned to launch a pilot program in the next two years. In 2017, Estonia became the first country to switch its medical-records system to a blockchain-based framework. Great Britain and Dubai are exploring a similar move. Yet in countries with more fragmented health systems, most notably the U.S., the challenges remain formidable. Some of the most advanced healthcare applications envisioned for blockchain, moreover, raise technological and ethical questions whose answers may not arrive anytime soon.
By creating a detailed, comprehensive, and immutable timeline of medical transactions, blockchain-based recordkeeping could help providers gauge a patient's long-term health patterns in a way that's never before been possible.
What Exactly Is Blockchain, Anyway?
To understand the buzz around blockchain, it's necessary to grasp (at least loosely) how the technology works. Ordinary digital recordkeeping systems rely on a central administrator that acts as gatekeeper to a treasury of data; if you can sneak past the guard, you can often gain access to the entire hoard, and your intrusion may go undetected indefinitely. Blockchain, by contrast, employs a network of synchronized, replicated databases. Information is scattered among these nodes, rather than on a single server, and is exchanged through encrypted, peer-to-peer pathways. Each transaction is visible to every computer on the network, and must be approved by a majority in order to be successfully completed. Each batch of transactions, or "block," is date- and time-stamped, marked with the user's identity, and given a cryptographic code, which is posted to every node. These blocks form a "chain," preserved in an electronic ledger, that can be read by all users but can't be edited. Any unauthorized access, or attempt at tampering, can be quickly neutralized by these overlapping safeguards. Even if a hacker managed to break into the system, penetrating deeply would be extraordinarily difficult.
Because blockchain technology shares transaction records throughout a network, it could eliminate communication bottlenecks between different components of the healthcare system (primary care physicians, specialists, nurses, and so on). And because blockchain-based systems are designed to incorporate programs known as "smart contracts," which automate functions previously requiring human intervention, they could reduce dangerous slipups as well as tedious and costly paperwork. For example, when a patient gets a checkup, sees a specialist, and fills a prescription, all these actions could be automatically recorded on his or her electronic health record (EHR), checked for errors, submitted for billing, and entered on insurance claims—which could be adjudicated and reimbursed automatically as well. "Blockchain has the potential to remove a lot of intermediaries from existing workflows, whether digital or nondigital," says Kamaljit Behera, an industry analyst for the consulting firm Frost & Sullivan.
The possible upsides don't end there. By creating a detailed, comprehensive, and immutable timeline of medical transactions, blockchain-based recordkeeping could help providers gauge a patient's long-term health patterns in a way that's never before been possible. In addition to data entered by their caregivers, individuals could use app-based technologies or wearables to transmit other information to their records, such as diet, exercise, and sleep patterns, adding new depth to their medical portraits.
Many experts expect healthcare blockchain to take root more slowly in the U.S. than in nations with government-run national health services.
Smart contracts could also allow patients to specify who has access to their data. "If you get an MRI and want your orthopedist to see it, you can add him to your network instead of carrying a CD into his office," explains Andrew Lippman, associate director of the MIT Media Lab, who helped create a prototype healthcare blockchain system called MedRec that's currently being tested at Beth Israel Deaconess Hospital in Boston. "Or you might make a smart contract to allow your son or daughter to access your healthcare records if something happens to you." Another option: permitting researchers to analyze your data for scientific purposes, whether anonymously or with your name attached.
The Recent History, and Looking Ahead
Over the past two years, a crowd of startups has begun vying for a piece of the emerging healthcare blockchain market. Some, like PokitDok and Atlanta-based Patientory, plan to mint proprietary cryptocurrencies, which investors can buy in lieu of stock, medical providers may earn as a reward for achieving better outcomes, and patients might score for meeting wellness goals or participating in clinical trials. (Patientory's initial coin offering, or ICO, raised more than $7 million in three days.) Several fledgling healthcare-blockchain companies have found powerful corporate partners: Intel for Silicon Valley's PokitDok, Kaiser Permanente for Patientory, Philips for Los Angeles-based Gem Health. At least one established provider network, Change Healthcare, is developing blockchain-based systems of its own. Two months ago, Change launched what it calls the first "enterprise-scale" blockchain network in U.S. healthcare—a system to track insurance claim submissions and remittances.
No one, however, has set a roll-out date for a full-blown, blockchain-based EHR system in this country. "We have yet to see anything move from the pilot phase to some kind of production status," says Debbie Bucci, an IT architect in the federal government's Office of the National Coordinator for Health Information Technology. Indeed, many experts expect healthcare blockchain to take root more slowly here than in nations with government-run national health services. In America, a typical patient may have dealings with a family doctor who keeps everything on paper, an assortment of hospitals that use different EHR systems, and an insurer whose system for processing claims is separate from that of the healthcare providers. To help bridge these gaps, a consortium called the Hyperledger Healthcare Working Group (which includes many of the leading players in the field) is developing standard protocols for blockchain interoperability and other functions. Adding to the complexity is the federal Health Insurance and Portability Act (HIPAA), which governs who can access patient data and under what circumstances. "Healthcare blockchain is in a very nascent stage," says Behera. "Coming up with regulations and other guidelines, and achieving large-scale implementation, will take some time."
The ethical implications of buying and selling personal genomic data in an electronic marketplace are doubtless open to debate.
How long? Behera, like other analysts, estimates that relatively simple applications, such as revenue-cycle management systems, could become commonplace in the next five years. More ambitious efforts might reach fruition in a decade or so. But once the infrastructure for healthcare blockchain is fully established, its uses could go far beyond keeping better EHRs.
A handful of scientists and entrepreneurs are already working to develop one visionary application: managing genomic data. Last month, Harvard University geneticist George Church—one of the most influential figures in his discipline—launched a business called Nebula Genomics. It aims to set up an exchange in which individuals can use "Neptune tokens" to purchase DNA sequencing, which will be stored in the company's blockchain-based system; research groups will be able to pay clients for their data using the same cryptocurrency. Luna DNA, founded by a team of biotech veterans in San Diego, plans a similar service, as does a Moscow-based startup called the Zenome Project.
Hossein Rahnama, CEO of the mobile-tech company Flybits and director of research at the Ryerson Centre for Cloud and Context-Aware Computing in Toronto, envisions a more personalized way of sharing genomic data via blockchain. His firm is working with a U.S. insurance company to develop a service that would allow clients in their 20s and 30s to connect with people in their 70s or 80s with similar genomes. The young clients would learn how the elders' lifestyle choices had influenced their health, so that they could modify their own habits accordingly. "It's intergenerational wisdom-sharing," explains Rahnama, who is 38. "I would actually pay to be a part of that network."
The ethical implications of buying and selling personal genomic data in an electronic marketplace are doubtless open to debate. Such commerce could greatly expand the pool of subjects for research in many areas of medicine, enabling the kinds of breakthroughs that only Big Data can provide. Yet it could also lead millions to surrender the most private information of all—the secrets of their cells—to buyers with less benign intentions. The Dark Overlord, one might argue, could not hope for a more satisfying victory.
These scenarios, however, are pure conjecture. After the first web page was posted, in 1991, Lippman observes, "a whole universe developed that you couldn't have imagined on Day 1." The same, he adds, is likely true for healthcare blockchain. "Our vision is to make medical records useful for you and for society, and to give you more control over your own identity. Time will tell."
No human has run a distance of 100 meters faster than Usain Bolt’s lightning streak in 2009. He set this record at age 22. But what will Bolt’s time be when he’s 105?
At the Louisiana Senior Games in November 2021, 105-year-old Julia Hawkins of Baton Rouge became the oldest woman to run 100 meters in an official competition, qualifying her for this year's National Senior Games. Perhaps not surprisingly, she was the only competitor in the race for people 105 and older. In this Leaps.org video, I interview Hawkins about her lifestyle habits over the decades. Then I ask Steven Austad, a pioneer in studying the mechanisms of aging, for his scientific insights into how those aspiring to become super-agers might follow in Hawkins' remarkable footsteps.
Following the Footsteps of a 105-Year-Old SprinterNo human has run a distance of 100 meters faster than Usain Bolt’s lightning streak in 2009. He set this record at age 22. But what will Bolt’s time be when ...
A new virus has emerged and stoked fears of another pandemic: monkeypox. Since May 2022, it has been detected in 29 U.S. states, the District of Columbia, and Puerto Rico among international travelers and their close contacts. On a worldwide scale, as of June 30, there have been 5,323 cases in 52 countries.
The good news: An existing vaccine can go a long way toward preventing a catastrophic outbreak. Because monkeypox is a close relative of smallpox, the same vaccine can be used—and it is about 85 percent effective against the virus, according to the World Health Organization (WHO).
Also on the plus side, monkeypox is less contagious with milder illness than smallpox and, compared to COVID-19, produces more telltale signs. Scientists think that a “ring” vaccination strategy can be used when these signs appear to help with squelching this alarming outbreak.
How it’s transmitted
Monkeypox spreads between people primarily through direct contact with infectious sores, scabs, or bodily fluids. People also can catch it through respiratory secretions during prolonged, face-to-face contact, according to the Centers for Disease Control and Prevention (CDC).
As of June 30, there have been 396 documented monkeypox cases in the U.S., and the CDC has activated its Emergency Operations Center to mobilize additional personnel and resources. The U.S. Department of Health and Human Services is aiming to boost testing capacity and accessibility. No Americans have died from monkeypox during this outbreak but, during the COVID-19 pandemic (February 2020 to date), Africa has documented 12,141 cases and 363 deaths from monkeypox.
Ring vaccination proved effective in curbing the smallpox and Ebola outbreaks. As the monkeypox threat continues to loom, scientists view this as the best vaccine approach.
A person infected with monkeypox typically has symptoms—for instance, fever and chills—in a contagious state, so knowing when to avoid close contact with others makes it easier to curtail than COVID-19.
Advantages of ring vaccination
For this reason, it’s feasible to vaccinate a “ring” of people around the infected individual rather than inoculating large swaths of the population. Ring vaccination proved effective in curbing the smallpox and Ebola outbreaks. As the monkeypox threat continues to loom, scientists view this as the best vaccine approach.
With many infections, “it normally would make sense to everyone to vaccinate more widely,” says Wesley C. Van Voorhis, a professor and director of the Center for Emerging and Re-emerging Infectious Diseases at the University of Washington School of Medicine in Seattle. However, “in this case, ring vaccination may be sufficient to contain the outbreak and also minimize the rare, but potentially serious side effects of the smallpox/monkeypox vaccine.”
There are two licensed smallpox vaccines in the United States: ACAM2000 (live Vaccina virus) and JYNNEOS (live virus non-replicating). The ACAM 2000, Van Voorhis says, is the old smallpox vaccine that, in rare instances, could spread diffusely within the body and cause heart problems, as well as severe rash in people with eczema or serious infection in immunocompromised patients.
To prevent organ damage, the current recommendation would be to use the JYNNEOS vaccine, says Phyllis Kanki, a professor of health sciences in the division of immunology and infectious diseases at the Harvard T.H. Chan School of Public Health. However, according to a report on the CDC’s website, people with immunocompromising conditions could have a higher risk of getting a severe case of monkeypox, despite being vaccinated, and “might be less likely to mount an effective response after any vaccination, including after JYNNEOS.”
In the late 1960s, the ring vaccination strategy became part of the WHO’s mission to globally eradicate smallpox, with the last known natural case described in Somalia in 1977. Ring vaccination can also refer to how a clinical trial is designed, as was the case in 2015, when this approach was used for researching the benefits of an investigational Ebola vaccine in Guinea, Kanki says.
“Since Monkeypox spreads by close contact and we have an effective vaccine, vaccinating high-risk individuals and their contacts may be a good strategy to limit transmission,” she says, adding that privacy is an important ethical principle that comes into play, as people with monkeypox would need to disclose their close contacts so that they could benefit from ring vaccination.
Rapid identification of cases and contacts—along with their cooperation—is essential for ring vaccination to be effective. Although mass vaccination also may work, the risk of infection to most of the population remains low while supply of the JYNNEOS vaccine is limited, says Stanley Deresinski, a clinical professor of medicine in the Infectious Disease Clinic at Stanford University School of Medicine.
Other strategies for preventing transmission
Ideally, the vaccine should be administered within four days of an exposure, but it’s recommended for up to 14 days. The WHO also advocates more widespread vaccination campaigns in the population segment with the most cases so far: men who engage in sex with other men.
The virus appears to be spreading in sexual networks, which differs from what was seen in previously reported outbreaks of monkeypox (outside of Africa), where risk was associated with travel to central or west Africa or various types of contact with individuals or animals from those locales. There is no evidence of transmission by food, but contaminated articles in the environment such as bedding are potential sources of the virus, Deresinski says.
Severe cases of monkeypox can occur, but “transmission of the virus requires close contact,” he says. “There is no evidence of aerosol transmission, as occurs with SARS-CoV-2, although it must be remembered that the smallpox virus, a close relative of monkeypox, was transmitted by aerosol.”
Deresinski points to the fact that in 2003, monkeypox was introduced into the U.S. through imports from Ghana of infected small mammals, such as Gambian giant rats, as pets. They infected prairie dogs, which also were sold as pets and, ultimately, this resulted in 37 confirmed transmissions to humans and 10 probable cases. A CDC investigation identified no cases of human-to-human transmission. Then, in 2021, a traveler flew from Nigeria to Dallas through Atlanta, developing skin lesions several days after arrival. Another CDC investigation yielded 223 contacts, although 85 percent were deemed to be at only minimal risk and the remainder at intermediate risk. No new cases were identified.
How much should we be worried
But how serious of a threat is monkeypox this time around? “Right now, the risk to the general public is very low,” says Scott Roberts, an assistant professor and associate medical director of infection prevention at Yale School of Medicine. “Monkeypox is spread through direct contact with infected skin lesions or through close contact for a prolonged period of time with an infected person. It is much less transmissible than COVID-19.”
The monkeypox incubation period—the time from infection until the onset of symptoms—is typically seven to 14 days but can range from five to 21 days, compared with only three days for the Omicron variant of COVID-19. With such a long incubation, there is a larger window to conduct contact tracing and vaccinate people before symptoms appear, which can prevent infection or lessen the severity.
But symptoms may present atypically or recognition may be delayed. “Ring vaccination works best with 100 percent adherence, and in the absence of a mandate, this is not achievable,” Roberts says.
At the outset of infection, symptoms include fever, chills, and fatigue. Several days later, a rash becomes noticeable, usually beginning on the face and spreading to other parts of the body, he says. The rash starts as flat lesions that raise and develop fluid, similar to manifestations of chickenpox. Once the rash scabs and falls off, a person is no longer contagious.
“It's an uncomfortable infection,” says Van Voorhis, the University of Washington School of Medicine professor. There may be swollen lymph nodes. Sores and rash are often limited to the genitals and areas around the mouth or rectum, suggesting intimate contact as the source of spread.
Symptoms of monkeypox usually last from two to four weeks. The WHO estimated that fatalities range from 3 to 6 percent. Although it’s believed to infect various animal species, including rodents and monkeys in west and central Africa, “the animal reservoir for the virus is unknown,” says Kanki, the Harvard T.H. Chan School of Public Health professor.
Too often, viruses originate in parts of the world that are too poor to grapple with them and may lack the resources to invest in vaccines and treatments. “This disease is endemic in central and west Africa, and it has basically been ignored until it jumped to the north and infected Europeans, Americans, and Canadians,” Van Voorhis says. “We have to do a better job in health care and prevention all over the world. This is the kind of thing that comes back to bite us.”