Bad Actors Getting Your Health Data Is the FBI’s Latest Worry
In February 2015, the health insurer Anthem revealed that criminal hackers had gained access to the company's servers, exposing the personal information of nearly 79 million patients. It's the largest known healthcare breach in history.
FBI agents worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks.
That year, the data of millions more would be compromised in one cyberattack after another on American insurers and other healthcare organizations. In fact, for the past several years, the number of reported data breaches has increased each year, from 199 in 2010 to 344 in 2017, according to a September 2018 analysis in the Journal of the American Medical Association.
The FBI's Edward You sees this as a worrying trend. He says hackers aren't just interested in your social security or credit card number. They're increasingly interested in stealing your medical information. Hackers can currently use this information to make fake identities, file fraudulent insurance claims, and order and sell expensive drugs and medical equipment. But beyond that, a new kind of cybersecurity threat is around the corner.
Mr. You and others worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks. In the wrong hands, this data could be used to exploit or extort an individual, discriminate against certain groups of people, make targeted bioweapons, or give another country an economic advantage.
Precision medicine, of course, is the idea that medical treatments can be tailored to individuals based on their genetics, environment, lifestyle or other traits. But to do that requires collecting and analyzing huge quantities of health data from diverse populations. One research effort, called All of Us, launched by the U.S. National Institutes of Health last year, aims to collect genomic and other healthcare data from one million participants with the goal of advancing personalized medical care.
Other initiatives are underway by academic institutions and healthcare organizations. Electronic medical records, genetic tests, wearable health trackers, mobile apps, and social media are all sources of valuable healthcare data that a bad actor could potentially use to learn more about an individual or group of people.
"When you aggregate all of that data together, that becomes a very powerful profile of who you are," Mr. You says.
A supervisory special agent in the biological countermeasures unit within the FBI's weapons of mass destruction directorate, it's Mr. You's job to imagine worst-case bioterror scenarios and figure out how to prevent and prepare for them.
That used to mean focusing on threats like anthrax, Ebola, and smallpox—pathogens that could be used to intentionally infect people—"basically the dangerous bugs," as he puts it. In recent years, advances in gene editing and synthetic biology have given rise to fears that rogue, or even well-intentioned, scientists could create a virulent virus that's intentionally, or unintentionally, released outside the lab.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that."
While Mr. You is still tracking those threats, he's been traveling around the country talking to scientists, lawyers, software engineers, cyber security professionals, government officials and CEOs about new security threats—those posed by genetic and other biological data.
Emerging threats
Mr. You says one possible situation he can imagine is the potential for nefarious actors to use an individual's sensitive medical information to extort or blackmail that person.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that," he says. For instance, "what happens if you have a singular medical condition and an outside entity says they have a treatment for your condition?" You could get talked into paying a huge sum of money for a treatment that ends up being bogus.
Or what if hackers got a hold of a politician or high-profile CEO's health records? Say that person had a disease-causing genetic mutation that could affect their ability to carry out their job in the future and hackers threatened to expose that information. These scenarios may seem far-fetched, but Mr. You thinks they're becoming increasingly plausible.
On a wider scale, Kavita Berger, a scientist at Gryphon Scientific, a Washington, D.C.-area life sciences consulting firm, worries that data from different populations could be used to discriminate against certain groups of people, like minorities and immigrants.
For instance, the advocacy group Human Rights Watch in 2017 flagged a concerning trend in China's Xinjiang territory, a region with a history of government repression. Police there had purchased 12 DNA sequencers and were collecting and cataloging DNA samples from people to build a national database.
"The concern is that this particular province has a huge population of the Muslim minority in China," Ms. Berger says. "Now they have a really huge database of genetic sequences. You have to ask, why does a police station need 12 next-generation sequencers?"
Also alarming is the potential that large amounts of data from different groups of people could lead to customized bioweapons if that data ends up in the wrong hands.
Eleonore Pauwels, a research fellow on emerging cybertechnologies at United Nations University's Centre for Policy Research, says new insights gained from genomic and other data will give scientists a better understanding of how diseases occur and why certain people are more susceptible to certain diseases.
"As you get more and more knowledge about the genomic picture and how the microbiome and the immune system of different populations function, you could get a much deeper understanding about how you could target different populations for treatment but also how you could eventually target them with different forms of bioagents," Ms. Pauwels says.
Economic competitiveness
Another reason hackers might want to gain access to large genomic and other healthcare datasets is to give their country a leg up economically. Many large cyber-attacks on U.S. healthcare organizations have been tied to Chinese hacking groups.
"This is a biological space race and we just haven't woken up to the fact that we're in this race."
"It's becoming clear that China is increasingly interested in getting access to massive data sets that come from different countries," Ms. Pauwels says.
A year after U.S. President Barack Obama conceived of the Precision Medicine Initiative in 2015—later renamed All of Us—China followed suit, announcing the launch of a 15-year, $9 billion precision health effort aimed at turning China into a global leader in genomics.
Chinese genomics companies, too, are expanding their reach outside of Asia. One company, WuXi NextCODE, which has offices in Shanghai, Reykjavik, and Cambridge, Massachusetts, has built an extensive library of genomes from the U.S., China and Iceland, and is now setting its sights on Ireland.
Another Chinese company, BGI, has partnered with Children's Hospital of Philadelphia and Sinai Health System in Toronto, and also formed a collaboration with the Smithsonian Institute to sequence all species on the planet. BGI has built its own advanced genomic sequencing machines to compete with U.S.-based Illumina.
Mr. You says having access to all this data could lead to major breakthroughs in healthcare, such as new blockbuster drugs. "Whoever has the largest, most diverse dataset is truly going to win the day and come up with something very profitable," he says.
Some direct-to-consumer genetic testing companies with offices in the U.S., like Dante Labs, also use BGI to process customers' DNA.
Experts worry that China could race ahead the U.S. in precision medicine because of Chinese laws governing data sharing. Currently, China prohibits the exportation of genetic data without explicit permission from the government. Mr. You says this creates an asymmetry in data sharing between the U.S. and China.
"This is a biological space race and we just haven't woken up to the fact that we're in this race," he said in January at an American Society for Microbiology conference in Washington, D.C. "We don't have access to their data. There is absolutely no reciprocity."
Protecting your data
While Mr. You has been stressing the importance of data security to anyone who will listen, the National Academies of Sciences, Engineering, and Medicine, which makes scientific and policy recommendations on issues of national importance, has commissioned a study on "safeguarding the bioeconomy."
In the meantime, Ms. Berger says organizations that deal with people's health data should assess their security risks and identify potential vulnerabilities in their systems.
As for what individuals can do to protect themselves, she urges people to think about the different ways they're sharing healthcare data—such as via mobile health apps and wearables.
"Ask yourself, what's the benefit of sharing this? What are the potential consequences of sharing this?" she says.
Mr. You also cautions people to think twice before taking consumer DNA tests. They may seem harmless, he says, but at the end of the day, most people don't know where their genetic information is going. "If your genetic sequence is taken, once it's gone, it's gone. There's nothing you can do about it."
New therapy may improve stem cell transplants for blood cancers
In 2018, Robyn was diagnosed with myelofibrosis, a blood cancer causing chronic inflammation and scarring. As a research scientist by training, she knew she had limited options. A stem cell transplant is a terminally ill patient's best chance for survival against blood cancers, including leukaemia. It works by destroying a patient's cancer cells and replacing them with healthy cells from a donor.
However, there is a huge risk of Graft vs Host disease (GVHD), which affects around 30-40% of recipients. Patients receive billions of cells in a stem cell transplant but only a fraction are beneficial. The rest can attack healthy tissue leading to GVHD. It affects the skin, gut and lungs and can be truly debilitating.
Currently, steroids are used to try and prevent GVHD, but they have many side effects and are effective in only 50% of cases. “I spoke with my doctors and reached out to patients managing GVHD,” says Robyn, who prefers not to use her last name for privacy reasons. “My concerns really escalated for what I might face post-transplant.”
Then she heard about a new highly precise cell therapy developed by a company called Orca Bio, which gives patients more beneficial cells and fewer cells that cause GVHD. She decided to take part in their phase 2 trial.
How It Works
In stem cell transplants, patients receive immune cells and stem cells. The donor immune cells or T cells attack and kill malignant cells. This is the graft vs leukaemia effect (GVL). The stem cells generate new healthy cells.
Unfortunately, T cells can also cause GVHD, but a rare subset of T cells, called T regulatory cells, can actually prevent GVHD.
Orca’s cell sorting technology distinguishes T regulatory cells from stem cells and conventional T cells on a large scale. It’s this cell sorting technology which has enabled them to create their new cell therapy, called Orca T. It contains a precise combination of stem cells and immune cells with more T regulatory cells and fewer conventional T cells than in a typical stem cell transplant.
“Ivan Dimov’s idea was to spread out the cells, keep them stationary and then use laser scanning to sort the cells,” explains Nate Fernhoff, co-founder of Orca Bio. “The beauty here is that lasers don't care how quickly you move them.”
Over the past 40 years, scientists have been trying to create stem cell grafts that contain the beneficial cells whilst removing the cells that cause GVHD. What makes it even harder is that most transplant centers aren’t able to manipulate grafts to create a precise combination of cells.
Innovative Cell Sorting
Ivan Dimov, Jeroen Bekaert and Nate Fernhoff came up with the idea behind Orca as postdocs at Stanford, working with cell pioneer Irving Weissman. They recognised the need for a more effective cell sorting technology. In a small study at Stanford, Professor Robert Negrin had discovered a combination of T cells, T regulatory cells and stem cells which prevented GVHD but retained the beneficial graft vs leukaemia effect (GVL). However, manufacturing was problematic. Conventional cell sorting is extremely slow and specific. Negrin was only able to make seven highly precise products, for seven patients, in a year. Annual worldwide cases of blood cancer number over 1.2 million.
“We started Orca with this idea: how do we use manufacturing solutions to impact cell therapies,” co-founder Fernhoff reveals. In conventional cell sorting, cells move past a stationary laser which analyses each cell. But cells can only be moved so quickly. At a certain point they start to experience stress and break down. This makes it very difficult to sort the 100 billion cells from a donor in a stem cell transplant.
“Ivan Dimov’s idea was to spread out the cells, keep them stationary and then use laser scanning to sort the cells,” Fernhoff explains. “The beauty here is that lasers don't care how quickly you move them.” They developed this technology and called it Orca Sort. It enabled Orca to make up to six products per week in the first year of manufacturing.
Every product Orca makes is for one patient. The donor is uniquely matched to the patient. They have to carry out the cell sorting procedure each time. Everything also has to be done extremely quickly. They infuse fresh living cells from the donor's vein to the patient's within 72 hours.
“We’ve treated almost 200 patients in all the Orca trials, and you can't do that if you don't fix the manufacturing process,” Fernhoff says. “We're working on what we think is an incredibly promising drug, but it's all been enabled by figuring out how to make a high precision cell therapy at scale.”
Clinical Trials
Orca revealed the results of their phase 1b and phase 2 trials at the end of last year. In their phase 2 trial only 3% of the 29 patients treated with Orca T cell therapy developed chronic GVHD in the first year after treatment. Comparatively, 43% of the 95 patients given a conventional stem cell transplant in a contemporary Stanford trial developed chronic GVHD. Of the 109 patients tested in phase 1b and phase 2 trials, 74% using Orca T didn't relapse or develop any form of GVHD compared to 34% in the control trial.
“Until a randomised study is done, we can make no assumption about the relative efficacy of this approach," says Jeff Szer, professor of haematology at the Royal Melbourne Hospital. "But the holy grail of separating GVHD and GVL is still there and this is a step towards realising that dream.”
Stan Riddell, an immunology professor, at Fred Hutchinson Cancer Centre, believes Orca T is highly promising. “Orca has advanced cell selection processes with innovative methodology and can engineer grafts with greater precision to add cell subsets that may further contribute to beneficial outcomes,” he says. “Their results in phase 1 and phase 2 studies are very exciting and offer the potential of providing a new standard of care for stem cell transplant.”
However, though it is an “intriguing step,” there’s a need for further testing, according to Jeff Szer, a professor of haematology at the Peter MacCallum Cancer Centre at the Royal Melbourne Hospital.
“The numbers tested were tiny and comparing the outcomes to anything from a phase 1/2 setting is risky,” says Szer. “Until a randomised study is done, we can make no assumption about the relative efficacy of this approach. But the holy grail of separating GVHD and GVL is still there and this is a step towards realising that dream.”
The Future
The team is soon starting Phase 3 trials for Orca T. Its previous success has led them to develop Orca Q, a cell therapy for patients who can't find an exact donor match. Transplants for patients who are only a half-match or mismatched are not widely used because there is a greater risk of GVHD. Orca Q has the potential to control GVHD even more and improve access to transplants for many patients.
Fernhoff hopes they’ll be able to help people not just with blood cancers but also with other blood and immune disorders. If a patient has a debilitating disease which isn't life threatening, the risk of GVHD outweighs the potential benefits of a stem cell transplant. The Orca products could take away that risk.
Meanwhile, Robyn has no regrets about participating in the Phase 2 trial. “It was a serious decision to make but I'm forever grateful that I did,” she says. “I have resumed a quality of life aligned with how I felt pre-transplant. I have not had a single issue with GVHD.”
“I want to be able to get one of these products to every patient who could benefit from it,” Fernhoff says. “It's really exciting to think about how Orca's products could be applied to all sorts of autoimmune disorders.”
Later this year, Verve Therapeutics of Cambridge, Ma., will initiate Phase 1 clinical trials to test VERVE-101, a new medication that, if successful, will employ gene editing to significantly reduce low-density lipoprotein cholesterol, or LDL.
LDL is sometimes referred to as the “bad” cholesterol because it collects in the walls of blood vessels, and high levels can increase chances of a heart attack, cardiovascular disease or stroke. There are approximately 600,000 heart attacks per year due to blood cholesterol damage in the United States, and heart disease is the number one cause of death in the world. According to the CDC, a 10 percent decrease in total blood cholesterol levels can reduce the incidence of heart disease by as much as 30 percent.
Verve’s Founder and CEO, Sekar Kathiresan, spent two decades studying the genetic basis for heart attacks while serving as a professor of medicine at Harvard Medical School. His research led to two critical insights.
“One is that there are some people that are naturally resistant to heart attack and have lifelong, low levels of LDL,” the cardiologist says. “Second, there are some genes that can be switched off that lead to very low LDL cholesterol, and individuals with those genes switched off are resistant to heart attacks.”
Kathiresan and his team formed a hypothesis in 2016 that if they could develop a medicine that mimics the natural protection that some people enjoy, then they might identify a powerful new way to treat and ultimately prevent heart attacks. They launched Verve in 2018 with the goal of creating a one-time therapy that would permanently lower LDL and eliminate heart attacks caused by high LDL.
"Imagine a future where somebody gets a one-time treatment at the time of their heart attack or before as a preventive measure," says Kathiresan.
The medication is targeted specifically for patients who have a genetic form of high cholesterol known as heterozygous familial hypercholesterolemia, or FH, caused by expression of a gene called PCSK9. Verve also plans to develop a program to silence a gene called ANGPTL3 for patients with FH and possibly those with or at risk of atherosclerotic cardiovascular disease.
FH causes cholesterol to be high from birth, reaching levels of 200 to 300 milligrams per deciliter. Suggested normal levels are around 100 to 129 mg/dl, and anything above 130 mg/dl is considered high. Patients with cardiovascular disease usually are asked to aim for under 70 mg/dl, but many still have unacceptably high LDL despite taking oral medications such as statins. They are more likely to have heart attacks in their 30s, 40s and 50s, and require lifelong LDL control.
The goal for drug treatments for high LDL, Kathiresan says, is to reduce LDL as low as possible for as long as possible. Physicians and researchers also know that a sizeable portion of these patients eventually start to lose their commitment to taking their statins and other LDL-controlling medications regularly.
“If you ask 100 patients one year after their heart attack what fraction are still taking their cholesterol-lowering medications, it’s less than half,” says Kathiresan. “So imagine a future where somebody gets a one-time treatment at the time of their heart attack or before as a preventive measure. It’s right in front of us, and it’s something that Verve is looking to do.”
In late 2020, Verve completed primate testing with monkeys that had genetically high cholesterol, using a one-time intravenous injection of VERVE-101. It reduced the monkeys’ LDL by 60 percent and, 18 months later, remains at that level. Kathiresan expects the LDL to stay low for the rest of their lives.
Verve’s gene editing medication is packaged in a lipid nanoparticle to serve as the delivery mechanism into the liver when infused intravenously. The drug is absorbed and makes its way into the nucleus of the liver cells.
Verve’s program targeting PCSK9 uses precise, single base, pair base editing, Kathiresan says, meaning it doesn't cut DNA like CRISPR gene editing systems do. Instead, it changes one base, or letter, in the genome to a different one without affecting the letters around it. Comparing it to a pencil and eraser, he explains that the medication erases out a letter A and makes it a letter G in the A, C, G and T code in DNA.
“We need to continue to advance our approach and tools to make sure that we have the absolute maximum ability to detect off-target effects,” says Euan Ashley, professor of medicine and genetics at Stanford University.
By making that simple change from A to G, the medication switches off the PCSK9 gene, automatically lowering LDL cholesterol.
“Once the DNA change is made, all the cells in the liver will have that single A to G change made,” Kathiresan says. “Then the liver cells divide and give rise to future liver cells, but every time the cell divides that change, the new G is carried forward.”
Additionally, Verve is pursuing its second gene editing program to eliminate ANGPTL3, a gene that raises both LDL and blood triglycerides. In 2010, Kathiresan's research team learned that people who had that gene completely switched off had LDL and triglyceride levels of about 20 and were very healthy with no heart attacks. The goal of Verve’s medication will be to switch off that gene, too, as an option for additional LDL or triglyceride lowering.
“Success with our first drug, VERVE-101, will give us more confidence to move forward with our second drug,” Kathiresan says. “And it opens up this general idea of making [genomic] spelling changes in the liver to treat other diseases.”
The approach is less ethically concerning than other gene editing technologies because it applies somatic editing that affects only the individual patient, whereas germline editing in the patient’s sperm or egg, or in an embryo, gets passed on to children. Additionally, gene editing therapies receive the same comprehensive amount of testing for side effects as any other medicine.
“We need to continue to advance our approach and tools to make sure that we have the absolute maximum ability to detect off-target effects,” says Euan Ashley, professor of medicine and genetics at Stanford University and founding director of its Center for Inherited Cardiovascular Disease. Ashley and his colleagues at Stanford’s Clinical Genomics Program and beyond are increasingly excited about the promise of gene editing.
“We can offer precision diagnostics, so increasingly we’re able to define the disease at a much deeper level using molecular tools and sequencing,” he continues. “We also have this immense power of reading the genome, but we’re really on the verge of taking advantage of the power that we now have to potentially correct some of the variants that we find on a genome that contribute to disease.”
He adds that while the gene editing medicines in development to correct genomes are ahead of the delivery mechanisms needed to get them into the body, particularly the heart and brain, he’s optimistic that those aren’t too far behind.
“It will probably take a few more years before those next generation tools start to get into clinical trials,” says Ashley, whose book, The Genome Odyssey, was published last year. “The medications might be the sexier part of the research, but if you can’t get it into the right place at the right time in the right dose and not get it to the places you don’t want it to go, then that tool is not of much use.”
Medical experts consider knocking out the PCSK9 gene in patients with the fairly common genetic disorder of familial hypercholesterolemia – roughly one in 250 people – a potentially safe approach to gene editing and an effective means of significantly lowering their LDL cholesterol.
Nurse Erin McGlennon has an Implantable Cardioverter Defibrillator and takes medications, but she is also hopeful that a gene editing medication will be developed in the near future.
Erin McGlennon
Mary McGowan, MD, chief medical officer for The Family Heart Foundation in Pasadena, CA, sees the tremendous potential for VERVE-101 and believes patients should be encouraged by the fact that this kind of research is occurring and how much Verve has accomplished in a relatively short time. However, she offers one caveat, since even a 60 percent reduction in LDL won’t completely eliminate the need to reduce the remaining amount of LDL.
“This technology is very exciting,” she said, “but we want to stress to our patients with familial hypercholesterolemia that we know from our published research that most people require several therapies to get their LDL down., whether that be in primary prevention less than 100 mg/dl or secondary prevention less than 70 mg/dl, So Verve’s medication would be an add-on therapy for most patients.”
Dr. Kathiresan concurs: “We expect our medicine to lower LDL cholesterol by about 60 percent and that our patients will be on background oral medications, including statins that lower LDL cholesterol.”
Several leading research centers are investigating gene editing treatments for other types of cardiovascular diseases. Elizabeth McNally, Elizabeth Ward Professor and Director at the Center for Genetic Medicine at Northwestern University’s Feinberg School of Medicine, pursues advanced genetic correction in neuromuscular diseases such as Duchenne muscular dystrophy and spinal muscular atrophy. A cardiologist, she and her colleagues know these diseases frequently have cardiac complications.
“Even though the field is driven by neuromuscular specialists, it’s the first therapies in patients with neuromuscular diseases that are also expected to make genetic corrections in the heart,” she says. “It’s almost like an afterthought that we’re potentially fixing the heart, too.”
Another limitation McGowan sees is that too many healthcare providers are not yet familiar with how to test patients to determine whether or not they carry genetic mutations that need to be corrected. “We need to get more genetic testing done,” she says. “For example, that’s the case with hypertrophic cardiomyopathy, where a lot of the people who probably carry that diagnosis and have never been genetically identified at a time when genetic testing has never been easier.”
One patient who has been diagnosed with hypertrophic cardiomyopathy also happens to be a nurse working in research at Genentech Pharmaceutical, now a member of the Roche Group, in South San Francisco. To treat the disease, Erin McGlennon, RN, has an Implantable Cardioverter Defibrillator and takes medications, but she is also hopeful that a gene editing medication will be developed in the near future.
“With my condition, the septum muscles are just growing thicker, so I’m on medicine to keep my heart from having dangerous rhythms,” says McGlennon of the disease that carries a low risk of sudden cardiac death. “So, the possibility of having a treatment option that can significantly improve my day-to-day functioning would be a major breakthrough.”
McGlennon has some control over cardiovascular destiny through at least one currently available technology: in vitro fertilization. She’s going through it to ensure that her children won't express the gene for hypertrophic cardiomyopathy.