Bad Actors Getting Your Health Data Is the FBI’s Latest Worry
In February 2015, the health insurer Anthem revealed that criminal hackers had gained access to the company's servers, exposing the personal information of nearly 79 million patients. It's the largest known healthcare breach in history.
FBI agents worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks.
That year, the data of millions more would be compromised in one cyberattack after another on American insurers and other healthcare organizations. In fact, for the past several years, the number of reported data breaches has increased each year, from 199 in 2010 to 344 in 2017, according to a September 2018 analysis in the Journal of the American Medical Association.
The FBI's Edward You sees this as a worrying trend. He says hackers aren't just interested in your social security or credit card number. They're increasingly interested in stealing your medical information. Hackers can currently use this information to make fake identities, file fraudulent insurance claims, and order and sell expensive drugs and medical equipment. But beyond that, a new kind of cybersecurity threat is around the corner.
Mr. You and others worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks. In the wrong hands, this data could be used to exploit or extort an individual, discriminate against certain groups of people, make targeted bioweapons, or give another country an economic advantage.
Precision medicine, of course, is the idea that medical treatments can be tailored to individuals based on their genetics, environment, lifestyle or other traits. But to do that requires collecting and analyzing huge quantities of health data from diverse populations. One research effort, called All of Us, launched by the U.S. National Institutes of Health last year, aims to collect genomic and other healthcare data from one million participants with the goal of advancing personalized medical care.
Other initiatives are underway by academic institutions and healthcare organizations. Electronic medical records, genetic tests, wearable health trackers, mobile apps, and social media are all sources of valuable healthcare data that a bad actor could potentially use to learn more about an individual or group of people.
"When you aggregate all of that data together, that becomes a very powerful profile of who you are," Mr. You says.
A supervisory special agent in the biological countermeasures unit within the FBI's weapons of mass destruction directorate, it's Mr. You's job to imagine worst-case bioterror scenarios and figure out how to prevent and prepare for them.
That used to mean focusing on threats like anthrax, Ebola, and smallpox—pathogens that could be used to intentionally infect people—"basically the dangerous bugs," as he puts it. In recent years, advances in gene editing and synthetic biology have given rise to fears that rogue, or even well-intentioned, scientists could create a virulent virus that's intentionally, or unintentionally, released outside the lab.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that."
While Mr. You is still tracking those threats, he's been traveling around the country talking to scientists, lawyers, software engineers, cyber security professionals, government officials and CEOs about new security threats—those posed by genetic and other biological data.
Emerging threats
Mr. You says one possible situation he can imagine is the potential for nefarious actors to use an individual's sensitive medical information to extort or blackmail that person.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that," he says. For instance, "what happens if you have a singular medical condition and an outside entity says they have a treatment for your condition?" You could get talked into paying a huge sum of money for a treatment that ends up being bogus.
Or what if hackers got a hold of a politician or high-profile CEO's health records? Say that person had a disease-causing genetic mutation that could affect their ability to carry out their job in the future and hackers threatened to expose that information. These scenarios may seem far-fetched, but Mr. You thinks they're becoming increasingly plausible.
On a wider scale, Kavita Berger, a scientist at Gryphon Scientific, a Washington, D.C.-area life sciences consulting firm, worries that data from different populations could be used to discriminate against certain groups of people, like minorities and immigrants.
For instance, the advocacy group Human Rights Watch in 2017 flagged a concerning trend in China's Xinjiang territory, a region with a history of government repression. Police there had purchased 12 DNA sequencers and were collecting and cataloging DNA samples from people to build a national database.
"The concern is that this particular province has a huge population of the Muslim minority in China," Ms. Berger says. "Now they have a really huge database of genetic sequences. You have to ask, why does a police station need 12 next-generation sequencers?"
Also alarming is the potential that large amounts of data from different groups of people could lead to customized bioweapons if that data ends up in the wrong hands.
Eleonore Pauwels, a research fellow on emerging cybertechnologies at United Nations University's Centre for Policy Research, says new insights gained from genomic and other data will give scientists a better understanding of how diseases occur and why certain people are more susceptible to certain diseases.
"As you get more and more knowledge about the genomic picture and how the microbiome and the immune system of different populations function, you could get a much deeper understanding about how you could target different populations for treatment but also how you could eventually target them with different forms of bioagents," Ms. Pauwels says.
Economic competitiveness
Another reason hackers might want to gain access to large genomic and other healthcare datasets is to give their country a leg up economically. Many large cyber-attacks on U.S. healthcare organizations have been tied to Chinese hacking groups.
"This is a biological space race and we just haven't woken up to the fact that we're in this race."
"It's becoming clear that China is increasingly interested in getting access to massive data sets that come from different countries," Ms. Pauwels says.
A year after U.S. President Barack Obama conceived of the Precision Medicine Initiative in 2015—later renamed All of Us—China followed suit, announcing the launch of a 15-year, $9 billion precision health effort aimed at turning China into a global leader in genomics.
Chinese genomics companies, too, are expanding their reach outside of Asia. One company, WuXi NextCODE, which has offices in Shanghai, Reykjavik, and Cambridge, Massachusetts, has built an extensive library of genomes from the U.S., China and Iceland, and is now setting its sights on Ireland.
Another Chinese company, BGI, has partnered with Children's Hospital of Philadelphia and Sinai Health System in Toronto, and also formed a collaboration with the Smithsonian Institute to sequence all species on the planet. BGI has built its own advanced genomic sequencing machines to compete with U.S.-based Illumina.
Mr. You says having access to all this data could lead to major breakthroughs in healthcare, such as new blockbuster drugs. "Whoever has the largest, most diverse dataset is truly going to win the day and come up with something very profitable," he says.
Some direct-to-consumer genetic testing companies with offices in the U.S., like Dante Labs, also use BGI to process customers' DNA.
Experts worry that China could race ahead the U.S. in precision medicine because of Chinese laws governing data sharing. Currently, China prohibits the exportation of genetic data without explicit permission from the government. Mr. You says this creates an asymmetry in data sharing between the U.S. and China.
"This is a biological space race and we just haven't woken up to the fact that we're in this race," he said in January at an American Society for Microbiology conference in Washington, D.C. "We don't have access to their data. There is absolutely no reciprocity."
Protecting your data
While Mr. You has been stressing the importance of data security to anyone who will listen, the National Academies of Sciences, Engineering, and Medicine, which makes scientific and policy recommendations on issues of national importance, has commissioned a study on "safeguarding the bioeconomy."
In the meantime, Ms. Berger says organizations that deal with people's health data should assess their security risks and identify potential vulnerabilities in their systems.
As for what individuals can do to protect themselves, she urges people to think about the different ways they're sharing healthcare data—such as via mobile health apps and wearables.
"Ask yourself, what's the benefit of sharing this? What are the potential consequences of sharing this?" she says.
Mr. You also cautions people to think twice before taking consumer DNA tests. They may seem harmless, he says, but at the end of the day, most people don't know where their genetic information is going. "If your genetic sequence is taken, once it's gone, it's gone. There's nothing you can do about it."
What makes people turn against science? After two years of a global pandemic, the world has never felt more divided on questions of science. But this is not a new phenomenon. People have resisted scientific and technological advances throughout history.
This video by Leaps.org, with support from the Gordon and Betty Moore Foundation, captures noteworthy examples from history when people rejected science. What do these cases have in common? Scientific breakthroughs can be revolutionary, but revolutions can be disorienting and anxiety-producing. They transform our livelihoods, culture and even our understanding of what it means to be human. But there's reason for optimism. Many of history’s controversies were overcome. Science has a way of enduring, because it changes things for the better.
Scientists search for a universal coronavirus vaccine
The Covid-19 pandemic had barely begun when VBI Vaccines, a biopharmaceutical company based in Cambridge, Massachusetts, initiated their search for a universal coronavirus vaccine.
It was March 2020, and while most pharmaceutical companies were scrambling to initiate vaccine programs which specifically targeted the SARS-CoV-2 virus, VBI’s executives were already keen to look at the broader picture.
Having observed the SARS and MERS coronavirus outbreaks over the last two decades, Jeff Baxter, CEO of VBI Vaccines, was aware that SARS-CoV-2 is unlikely to be the last coronavirus to move from an animal host into humans. “It's absolutely apparent that the future is to create a vaccine which gives more broad protection against not only pre-existing coronaviruses, but those that will potentially make the leap into humans in future,” says Baxter.
It was a prescient decision. Over the last two years, more biotechs and pharma companies have joined the search to find a vaccine which might be able to protect against all coronaviruses, along with dozens of academic research groups. Last September, the US National Institutes of Health dedicated $36 million specifically to pan-coronavirus vaccine research, while the global Coalition for Epidemic Preparedness Innovations (CEPI) has earmarked $200 million towards the effort.
Until October 2021, the very concept of whether it might be
theoretically possible to vaccinate against multiple coronaviruses remained an open question. But then a groundbreaking study renewed optimism.
The emergence of new variants of Covid-19 over the past year, particularly the highly mutated Omicron variant, has added greater impetus to find broader spectrum vaccines. But until October 2021, the very concept of whether it might be theoretically possible to vaccinate against multiple coronaviruses remained an open question. After all, scientists have spent decades trying to develop a similar vaccine for influenza with little success.
But then a groundbreaking study from renowned virologist Linfa Wang, who runs the emerging infectious diseases program at Duke-National University of Singapore Medical School, provided renewed optimism.
Wang found that eight SARS survivors who had been injected with the Pfizer/BioNTech Covid-19 vaccine had neutralising antibodies in their blood against SARS, the Alpha, Beta and Delta variants of SARS-CoV-2, and five other coronaviruses which reside in bats and pangolins. He concluded that the combination of past coronavirus infection, and immunization with a messenger RNA vaccine, had resulted in a wider spectrum of protection than might have been expected.
“This is a significant study because it showed that pre-existing immunity to one coronavirus could help with the elicitation of cross-reactive antibodies when immunizing with a second coronavirus,” says Kevin Saunders, Director of Research at the Duke Human Vaccine Institute in North Carolina, which is developing a universal coronavirus vaccine. “It provides a strategy to perhaps broaden the immune response against coronaviruses.”
In the next few months, some of the first data is set to emerge looking at whether this kind of antibody response could be elicited by a single universal coronavirus vaccine. In April 2021, scientists at the Walter Reed Army Institute of Research in Silver Spring, Maryland, launched a Phase I clinical trial of their vaccine, with a spokesman saying that it was successful, and the full results will be announced soon.
The Walter Reed researchers have already released preclinical data, testing the vaccine in non-human primates where it was found to have immunising capabilities against a range of Covid-19 variants as well as the original SARS virus. If the Phase I trial displays similar efficacy, a larger Phase II trial will begin later this year.
Two different approaches
Broadly speaking, scientists are taking two contrasting approaches to the task of finding a universal coronavirus vaccine. The Walter Reed Army Institute of Research, VBI Vaccines – who plan to launch their own clinical trial in the summer – and the Duke Human Vaccine Institute – who are launching a Phase I trial in early 2023 – are using a soccer-ball shaped ferritin nanoparticle studded with different coronavirus protein fragments.
VBI Vaccines is looking to elicit broader immune responses by combining SARS, SARS-CoV-2 and MERS spike proteins on the same nanoparticle. Dave Anderson, chief scientific officer at VBI Vaccines, explains that the idea is that by showing the immune system these three spike proteins at the same time, it can help train it to identify and respond to subtle differences between coronavirus strains.
The Duke Human Vaccine Institute is utilising the same method, but rather than including the entire spike proteins from different coronaviruses, they are only including the receptor binding domain (RBD) fragment from each spike protein. “We designed our vaccine to focus the immune system on a site of vulnerability for the virus, which is the receptor binding domain,” says Saunders. “Since the RBD is small, arraying multiple RBDs on a nanoparticle is a straight-forward approach. The goal is to generate immunity to many different subgenuses of viruses so that there will be cross-reactivity with new or unknown coronaviruses.”
But the other strategy is to create a vaccine which contains regions of the viral protein structure which are conserved between all coronavirus strains. This is something which scientists have tried to do for a universal influenza vaccine, but it is thought to be more feasible for coronaviruses because they mutate at a slower rate and are more constrained in the ways that they can evolve.
DIOSynVax, a biotech based in Cambridge, United Kingdom, announced in a press release earlier this month that they are partnering with CEPI to use their computational predictive modelling techniques to identify common structures between all of the SARS coronaviruses which do not mutate, and thus present good vaccine targets.
Stephen Zeichner, an infectious disease specialist at the University of Virginia Medical Center, has created an early stage vaccine using the fusion peptide region – another part of the coronavirus spike protein that aids the virus’s entry into host cells – which so far appears to be highly conserved between all coronaviruses.
So far Zeichner has trialled this version of the vaccine in pigs, where it provided protection against a different coronavirus called porcine epidemic diarrhea virus, which he described as very promising as this virus is from a different family called alphacoronaviruses, while SARS-CoV-2 is a betacoronavirus.
“If a betacoronavirus fusion peptide vaccine designed from SARS-CoV-2 can protect pigs against clinical disease from an alphacoronavirus, then that suggests that an analogous vaccine would enable broad protection against many, many different coronaviruses,” he says.
The road ahead
But while some of the early stage results are promising, researchers are fully aware of the scale of the challenge ahead of them. Although CEPI have declared an aim of having a licensed universal coronavirus vaccine available by 2024-2025, Zeichner says that such timelines are ambitious in the extreme.
“I was incredibly impressed at the speed at which the mRNA coronavirus vaccines were developed for SARS-CoV-2,” he says. “That was faster than just about anybody anticipated. On the other hand, I think a universal coronavirus vaccine is more equivalent to the challenge of developing an HIV vaccine and we're 35 years into that effort without success. We know a lot more now than before, and maybe it will be easier than we think. But I think the route to a universal vaccine is harder than an individual vaccine, so I wouldn’t want to put money on a timeline prediction.”
The major challenge for scientists is essentially designing a vaccine for a future threat which is not even here yet. As such, there are no guidelines on what safety data would be required to license such a vaccine, and how researchers can demonstrate that it truly provides efficacy against all coronaviruses, even those which have not yet jumped to humans.
The teams working on this problem have already devised some ingenious ways of approaching the challenge. VBI Vaccines have taken the genetic sequences of different coronaviruses found in bats and pangolins, from publicly available databases, and inserted them into what virologists call a pseudotype virus – one which has been engineered so it does not have enough genetic material to replicate.
This has allowed them to test the neutralising antibodies that their vaccine produces against these coronaviruses in test tubes, under safe lab conditions. “We have literally just been ordering the sequences, and making synthetic viruses that we can use to test the antibody responses,” says Anderson.
However, some scientists feel that going straight to a universal coronavirus vaccine is likely to be too complex. Instead they say that we should aim for vaccines which are a little more specific. Pamela Bjorkman, a structural biologist at the California Institute of Technology, suggests that pan-coronavirus vaccines which protect against SARS-like betacoronaviruses such as SARS or SARS-CoV-2, or MERS-like betacoronaviruses, may be more realistic.
“I think a vaccine to protect against all coronaviruses is likely impossible since there are so many varieties,” she says. “Perhaps trying to narrow down the scope is advisable.”
But if the mission to develop a universal coronavirus vaccine does succeed, it will be one of the most remarkable feats in the annals of medical science. In January, US chief medical advisor Anthony Fauci urged for greater efforts to be devoted towards this goal, one which scientists feel would be the biological equivalent of the race to develop the first atomic bomb
“The development of an effective universal coronavirus vaccine would be equally groundbreaking, as it would have global applicability and utility,” says Saunders. “Coronaviruses have caused multiple deadly outbreaks, and it is likely that another outbreak will occur. Having a vaccine that prevents death from a future outbreak would be a tremendous achievement in global health.”
He agrees that it will require creativity on a remarkable scale: “The universal coronavirus vaccine will also require ingenuity and perseverance comparable to that needed for the Manhattan project.”