Bad Actors Getting Your Health Data Is the FBI’s Latest Worry
In February 2015, the health insurer Anthem revealed that criminal hackers had gained access to the company's servers, exposing the personal information of nearly 79 million patients. It's the largest known healthcare breach in history.
FBI agents worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks.
That year, the data of millions more would be compromised in one cyberattack after another on American insurers and other healthcare organizations. In fact, for the past several years, the number of reported data breaches has increased each year, from 199 in 2010 to 344 in 2017, according to a September 2018 analysis in the Journal of the American Medical Association.
The FBI's Edward You sees this as a worrying trend. He says hackers aren't just interested in your social security or credit card number. They're increasingly interested in stealing your medical information. Hackers can currently use this information to make fake identities, file fraudulent insurance claims, and order and sell expensive drugs and medical equipment. But beyond that, a new kind of cybersecurity threat is around the corner.
Mr. You and others worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks. In the wrong hands, this data could be used to exploit or extort an individual, discriminate against certain groups of people, make targeted bioweapons, or give another country an economic advantage.
Precision medicine, of course, is the idea that medical treatments can be tailored to individuals based on their genetics, environment, lifestyle or other traits. But to do that requires collecting and analyzing huge quantities of health data from diverse populations. One research effort, called All of Us, launched by the U.S. National Institutes of Health last year, aims to collect genomic and other healthcare data from one million participants with the goal of advancing personalized medical care.
Other initiatives are underway by academic institutions and healthcare organizations. Electronic medical records, genetic tests, wearable health trackers, mobile apps, and social media are all sources of valuable healthcare data that a bad actor could potentially use to learn more about an individual or group of people.
"When you aggregate all of that data together, that becomes a very powerful profile of who you are," Mr. You says.
A supervisory special agent in the biological countermeasures unit within the FBI's weapons of mass destruction directorate, it's Mr. You's job to imagine worst-case bioterror scenarios and figure out how to prevent and prepare for them.
That used to mean focusing on threats like anthrax, Ebola, and smallpox—pathogens that could be used to intentionally infect people—"basically the dangerous bugs," as he puts it. In recent years, advances in gene editing and synthetic biology have given rise to fears that rogue, or even well-intentioned, scientists could create a virulent virus that's intentionally, or unintentionally, released outside the lab.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that."
While Mr. You is still tracking those threats, he's been traveling around the country talking to scientists, lawyers, software engineers, cyber security professionals, government officials and CEOs about new security threats—those posed by genetic and other biological data.
Emerging threats
Mr. You says one possible situation he can imagine is the potential for nefarious actors to use an individual's sensitive medical information to extort or blackmail that person.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that," he says. For instance, "what happens if you have a singular medical condition and an outside entity says they have a treatment for your condition?" You could get talked into paying a huge sum of money for a treatment that ends up being bogus.
Or what if hackers got a hold of a politician or high-profile CEO's health records? Say that person had a disease-causing genetic mutation that could affect their ability to carry out their job in the future and hackers threatened to expose that information. These scenarios may seem far-fetched, but Mr. You thinks they're becoming increasingly plausible.
On a wider scale, Kavita Berger, a scientist at Gryphon Scientific, a Washington, D.C.-area life sciences consulting firm, worries that data from different populations could be used to discriminate against certain groups of people, like minorities and immigrants.
For instance, the advocacy group Human Rights Watch in 2017 flagged a concerning trend in China's Xinjiang territory, a region with a history of government repression. Police there had purchased 12 DNA sequencers and were collecting and cataloging DNA samples from people to build a national database.
"The concern is that this particular province has a huge population of the Muslim minority in China," Ms. Berger says. "Now they have a really huge database of genetic sequences. You have to ask, why does a police station need 12 next-generation sequencers?"
Also alarming is the potential that large amounts of data from different groups of people could lead to customized bioweapons if that data ends up in the wrong hands.
Eleonore Pauwels, a research fellow on emerging cybertechnologies at United Nations University's Centre for Policy Research, says new insights gained from genomic and other data will give scientists a better understanding of how diseases occur and why certain people are more susceptible to certain diseases.
"As you get more and more knowledge about the genomic picture and how the microbiome and the immune system of different populations function, you could get a much deeper understanding about how you could target different populations for treatment but also how you could eventually target them with different forms of bioagents," Ms. Pauwels says.
Economic competitiveness
Another reason hackers might want to gain access to large genomic and other healthcare datasets is to give their country a leg up economically. Many large cyber-attacks on U.S. healthcare organizations have been tied to Chinese hacking groups.
"This is a biological space race and we just haven't woken up to the fact that we're in this race."
"It's becoming clear that China is increasingly interested in getting access to massive data sets that come from different countries," Ms. Pauwels says.
A year after U.S. President Barack Obama conceived of the Precision Medicine Initiative in 2015—later renamed All of Us—China followed suit, announcing the launch of a 15-year, $9 billion precision health effort aimed at turning China into a global leader in genomics.
Chinese genomics companies, too, are expanding their reach outside of Asia. One company, WuXi NextCODE, which has offices in Shanghai, Reykjavik, and Cambridge, Massachusetts, has built an extensive library of genomes from the U.S., China and Iceland, and is now setting its sights on Ireland.
Another Chinese company, BGI, has partnered with Children's Hospital of Philadelphia and Sinai Health System in Toronto, and also formed a collaboration with the Smithsonian Institute to sequence all species on the planet. BGI has built its own advanced genomic sequencing machines to compete with U.S.-based Illumina.
Mr. You says having access to all this data could lead to major breakthroughs in healthcare, such as new blockbuster drugs. "Whoever has the largest, most diverse dataset is truly going to win the day and come up with something very profitable," he says.
Some direct-to-consumer genetic testing companies with offices in the U.S., like Dante Labs, also use BGI to process customers' DNA.
Experts worry that China could race ahead the U.S. in precision medicine because of Chinese laws governing data sharing. Currently, China prohibits the exportation of genetic data without explicit permission from the government. Mr. You says this creates an asymmetry in data sharing between the U.S. and China.
"This is a biological space race and we just haven't woken up to the fact that we're in this race," he said in January at an American Society for Microbiology conference in Washington, D.C. "We don't have access to their data. There is absolutely no reciprocity."
Protecting your data
While Mr. You has been stressing the importance of data security to anyone who will listen, the National Academies of Sciences, Engineering, and Medicine, which makes scientific and policy recommendations on issues of national importance, has commissioned a study on "safeguarding the bioeconomy."
In the meantime, Ms. Berger says organizations that deal with people's health data should assess their security risks and identify potential vulnerabilities in their systems.
As for what individuals can do to protect themselves, she urges people to think about the different ways they're sharing healthcare data—such as via mobile health apps and wearables.
"Ask yourself, what's the benefit of sharing this? What are the potential consequences of sharing this?" she says.
Mr. You also cautions people to think twice before taking consumer DNA tests. They may seem harmless, he says, but at the end of the day, most people don't know where their genetic information is going. "If your genetic sequence is taken, once it's gone, it's gone. There's nothing you can do about it."
New Options Are Emerging in the Search for Better Birth Control
A decade ago, Elizabeth Summers' options for birth control suddenly narrowed. Doctors diagnosed her with Factor V Leiden, a rare genetic disorder, after discovering blood clots in her lungs. The condition increases the risk of clotting, so physicians told Summers to stay away from the pill and other hormone-laden contraceptives. "Modern medicine has generally failed to provide me with an effective and convenient option," she says.
But new birth control options are emerging for women like Summers. These alternatives promise to provide more choices to women who can't ingest hormones or don't want to suffer their unpleasant side effects.
These new products have their own pros and cons. Still, doctors are welcoming new contraceptives following a long drought in innovation. "It's been a long time since we've had something new in the world of contraception," says Heather Irobunda, an obstetrician and gynecologist at NYC Health and Hospitals.
On social media, Irobunda often fields questions about one of these new options, a lubricating gel called Phexxi. San Diego-based Evofem, the company behind Phexxi, has been advertising the product on Hulu and Instagram after the gel was approved by the Food and Drug Administration in May 2020. The company's trendy ads target women who feel like condoms diminish the mood, but who also don't want to mess with an IUD or hormones.
Here's how it works: Phexxi is inserted via a tampon-like device up to an hour before sex. The gel regulates vaginal pH — essentially, the acidity levels — in a range that's inhospitable to sperm. It sounds a lot like spermicide, which is also placed in the vagina prior to sex to prevent pregnancy. But spermicide can damage the vagina's cell walls, which can increase the risk of contracting sexually transmitted diseases.
"Not only is innovation needed, but women want a non-hormonal option."
Phexxi isn't without side effects either. The most common one is vaginal burning, according to a late-stage trial. It's also possible to develop a urinary tract infection while using the product. That same study found that during typical use, Phexxi is about 86 percent effective at preventing pregnancy. The efficacy rate is comparable to condoms but lower than birth control pills (91 percent) and significantly lower than an IUD (99 percent).
Phexxi – which comes in a pack of 12 – represents a tiny but growing part of the birth control market. Pharmacies dispensed more than 14,800 packs from April through June this year, a 65 percent increase over the previous quarter, according to data from Evofem.
"We've been able to demonstrate that not only is innovation needed, but women want a non-hormonal option," says Saundra Pelletier, Evofem's CEO.
Beyond contraception, the company is carrying out late-stage tests to gauge Phexxi's effectiveness at preventing the sexually transmitted infections chlamydia and gonorrhea.
Phexxi is inserted via a tampon-like device up to an hour before sex.
Phexxi
A New Pill
The first birth control pill arrived in 1960, combining the hormones estrogen and progestin to stop sperm from joining with an egg, giving women control over their fertility. Subsequent formulations sought to ease side effects, by way of lower amounts of estrogen. But some women still experience headaches and nausea – or more serious complications like blood clots. On social media, women recently noted that birth control pills are much more likely to cause blood clots than Johnson & Johnson's COVID-19 vaccine that was briefly paused to evaluate the risk of clots in women under age 50. What will it take, they wondered, for safer birth control?
Mithra Pharmaceuticals of Belgium sought to create a gentler pill. In April, the FDA approved Mithra's Nextstellis, which includes a naturally occurring estrogen, the first new estrogen in the U.S. in 50 years. Nextstellis selectively acts on tissues lining the uterus, while other birth control pills have a broader target.
A Phase 3 trial showed a 98 percent efficacy rate. Andrew London, an obstetrician and gynecologist, who practices at several Maryland hospitals, says the results are in line with some other birth control pills. But, he added, early studies indicate that Nextstellis has a lower risk of blood clotting, along with other potential benefits, which additional clinical testing must confirm.
"It's not going to be worse than any other pill. We're hoping it's going to be significantly better," says London.
The estrogen in Nexstellis, called estetrol, was skipped over by the pharmaceutical industry after its discovery in the 1960s. Estetrol circulates between the mother and fetus during pregnancy. Decades later, researchers took a new look, after figuring out how to synthesize estetrol in a lab, as well as produce estetrol from plants.
"That allowed us to really start to investigate the properties and do all this stuff you have to do for any new drug," says Michele Gordon, vice president of marketing in women's health at Mayne Pharma, which licensed Nextstellis.
Bonnie Douglas, who followed the development of Nextstellis as part of a search for better birth control, recently switched to the product. "So far, it's much more tolerable," says Douglas. Previously, the Midwesterner was so desperate to find a contraceptive with fewer side effects that she turned to an online pharmacy to obtain a different birth control pill that had been approved in Canada but not in the U.S.
Contraceptive Access
Even if a contraceptive lands FDA approval, access poses a barrier. Getting insurers to cover new contraceptives can be difficult. For the uninsured, state and federal programs can help, and companies should keep prices in a reasonable range, while offering assistance programs. So says Kelly Blanchard, president of the nonprofit Ibis Reproductive Health. "For innovation to have impact, you want to reach as many folks as possible," she says.
In addition, companies developing new contraceptives have struggled to attract venture capital. That's changing, though.
In 2015, Sabrina Johnson founded DARÉ Bioscience around the idea of women's health. She estimated the company would be fully funded in six months, based on her track record in biotech and the demand for novel products.
But it's been difficult to get male investors interested in backing new contraceptives. It took Johnson two and a half years to raise the needed funds, via a reverse merger that took the company public. "There was so much education that was necessary," Johnson says, adding: "The landscape has changed considerably."
Johnson says she would like to think DARÉ had something to do with the shift, along with companies like Organon, a spinout of pharma company Merck that's focused on reproductive health. In surveying the fertility landscape, DARÉ saw limited non-hormonal options. On-demand options – like condoms – can detract from the moment. Copper IUDs must be inserted by a doctor and removed if a woman wants to return to fertility, and this method can have onerous side effects.
So, DARÉ created Ovaprene, a hormone-free device that's designed to be inserted into the vagina monthly by the user. The mesh product acts as a barrier, while releasing a chemical that immobilizes sperm. In an early study, the company reported that Ovaprene prevented almost all sperm from entering the cervical canal. The results, DARÉ believes, indicate high efficacy.
A late-stage study, slated to kick off next year, will be the true judge. Should Ovaprene eventually win regulatory approval, drug giant Bayer will handle commercializing the device.
Other new forms of birth control in development are further out, and that's assuming they perform well in clinical trials. Among them: a once-a-month birth control pill, along with a male version of the birth control pill. The latter is often brought up among women who say it's high time that men take a more proactive role in birth control.
For Summers, her search for a safe and convenient birth control continues. She tried Phexxi, which caused irritation. Still, she's excited that a non-hormonal option now exists. "I'm sure it will work for others," she says.
Scientists Are Growing an Edible Cholera Vaccine in Rice
The world's attention has been focused on the coronavirus crisis but Yemen, Bangladesh and many others countries in Asia and Africa are also in the grips of another pandemic: cholera. The current cholera pandemic first emerged in the 1970s and has devastated many communities in low-income countries. Each year, cholera is responsible for an estimated 1.3 million to 4 million cases and 21,000 to 143,000 deaths worldwide.
Immunologist Hiroshi Kiyono and his team at the University of Tokyo hope they can be part of the solution: They're making a cholera vaccine out of rice.
"It is much less expensive than a traditional vaccine, by a long shot."
Cholera is caused by eating food or drinking water that's contaminated by the feces of a person infected with the cholera bacteria, Vibrio cholerae. The bacteria produces the cholera toxin in the intestines, leading to vomiting, diarrhea and severe dehydration. Cholera can kill within hours of infection if it if's not treated quickly.
Current cholera vaccines are mainly oral. The most common oral are given in two doses and are made out of animal or insect cells that are infected with killed or weakened cholera bacteria. Dukoral also includes cells infected with CTB, a non-harmful part of the cholera toxin. Scientists grow cells containing the cholera bacteria and the CTB in bioreactors, large tanks in which conditions can be carefully controlled.
These cholera vaccines offer moderate protection but it wears off relatively quickly. Cold storage can also be an issue. The most common oral vaccines can be stored at room temperature but only for 14 days.
"Current vaccines confer around 60% efficacy over five years post-vaccination," says Lucy Breakwell, who leads the U.S. Centers for Disease Control and Prevention's cholera work within Global Immunization Division. Given the limited protection, refrigeration issue, and the fact that current oral vaccines require two disease, delivery of cholera vaccines in a campaign or emergency setting can be challenging. "There is a need to develop and test new vaccines to improve public health response to cholera outbreaks."
A New Kind of Vaccine
Kiyono and scientists at Tokyo University are creating a new, plant-based cholera vaccine dubbed MucoRice-CTB. The researchers genetically modify rice so that it contains CTB, a non-harmful part of the cholera toxin. The rice is crushed into a powder, mixed with saline solution and then drunk. The digestive tract is lined with mucosal membranes which contain the mucosal immune system. The mucosal immune system gets trained to recognize the cholera toxin as the rice passes through the intestines.
The cholera toxin has two main parts: the A subunit, which is harmful, and the B subunit, also known as CTB, which is nontoxic but allows the cholera bacteria to attach to gut cells. By inducing CTB-specific antibodies, "we might be able to block the binding of the vaccine toxin to gut cells, leading to the prevention of the toxin causing diarrhea," Kiyono says.
Kiyono studies the immune responses that occur at mucosal membranes across the body. He chose to focus on cholera because he wanted to replicate the way traditional vaccines work to get mucosal membranes in the digestive tract to produce an immune response. The difference is that his team is creating a food-based vaccine to induce this immune response. They are also solely focusing on getting the vaccine to induce antibodies for the cholera toxin. Since the cholera toxin is responsible for bacteria sticking to gut cells, the hope is that they can stop this process by producing antibodies for the cholera toxin. Current cholera vaccines target the cholera bacteria or both the bacteria and the toxin.
David Pascual, an expert in infectious diseases and immunology at the University of Florida, thinks that the MucoRice vaccine has huge promise. "I truly believe that the development of a food-based vaccine can be effective. CTB has a natural affinity for sampling cells in the gut to adhere, be processed, and then stimulate our immune system, he says. "In addition to vaccinating the gut, MucoRice has the potential to touch other mucosal surfaces in the mouth, which can help generate an immune response locally in the mouth and distally in the gut."
Cost Effectiveness
Kiyono says the MucoRice vaccine is much cheaper to produce than a traditional vaccine. Current vaccines need expensive bioreactors to grow cell cultures under very controlled, sterile conditions. This makes them expensive to manufacture, as different types of cell cultures need to be grown in separate buildings to avoid any chance of contamination. MucoRice doesn't require such an expensive manufacturing process because the rice plants themselves act as bioreactors.
The MucoRice vaccine also doesn't require the high cost of cold storage. It can be stored at room temperature for up to three years unlike traditional vaccines. "Plant-based vaccine development platforms present an exciting tool to reduce vaccine manufacturing costs, expand vaccine shelf life, and remove refrigeration requirements, all of which are factors that can limit vaccine supply and accessibility," Breakwell says.
Kathleen Hefferon, a microbiologist at Cornell University agrees. "It is much less expensive than a traditional vaccine, by a long shot," she says. "The fact that it is made in rice means the vaccine can be stored for long periods on the shelf, without losing its activity."
A plant-based vaccine may even be able to address vaccine hesitancy, which has become a growing problem in recent years. Hefferon suggests that "using well-known food plants may serve to reduce the anxiety of some vaccine hesitant people."
Challenges of Plant Vaccines
Despite their advantages, no plant-based vaccines have been commercialized for human use. There are a number of reasons for this, ranging from the potential for too much variation in plants to the lack of facilities large enough to grow crops that comply with good manufacturing practices. Several plant vaccines for diseases like HIV and COVID-19 are in development, but they're still in early stages.
In developing the MucoRice vaccine, scientists at the University of Tokyo have tried to overcome some of the problems with plant vaccines. They've created a closed facility where they can grow rice plants directly in nutrient-rich water rather than soil. This ensures they can grow crops all year round in a space that satisfies regulations. There's also less chance for variation since the environment is tightly controlled.
Clinical Trials and Beyond
After successfully growing rice plants containing the vaccine, the team carried out their first clinical trial. It was completed early this year. Thirty participants received a placebo and 30 received the vaccine. They were all Japanese men between the ages of 20 and 40 years old. 60 percent produced antibodies against the cholera toxin with no side effects. It was a promising result. However, there are still some issues Kiyono's team need to address.
The vaccine may not provide enough protection on its own. The antigen in any vaccine is the substance it contains to induce an immune response. For the MucoRice vaccine, the antigen is not the cholera bacteria itself but the cholera toxin the bacteria produces.
"The development of the antigen in rice is innovative," says David Sack, a professor at John Hopkins University and expert in cholera vaccine development. "But antibodies against only the toxin have not been very protective. The major protective antigen is thought to be the LPS." LPS, or lipopolysaccharide, is a component of the outer wall of the cholera bacteria that plays an important role in eliciting an immune response.
The Japanese team is considering getting the rice to also express the O antigen, a core part of the LPS. Further investigation and clinical trials will look into improving the vaccine's efficacy.
Beyond cholera, Kiyono hopes that the vaccine platform could one day be used to make cost-effective vaccines for other pathogens, such as norovirus or coronavirus.
"We believe the MucoRice system may become a new generation of vaccine production, storage, and delivery system."