Bad Actors Getting Your Health Data Is the FBI’s Latest Worry
In February 2015, the health insurer Anthem revealed that criminal hackers had gained access to the company's servers, exposing the personal information of nearly 79 million patients. It's the largest known healthcare breach in history.
FBI agents worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks.
That year, the data of millions more would be compromised in one cyberattack after another on American insurers and other healthcare organizations. In fact, for the past several years, the number of reported data breaches has increased each year, from 199 in 2010 to 344 in 2017, according to a September 2018 analysis in the Journal of the American Medical Association.
The FBI's Edward You sees this as a worrying trend. He says hackers aren't just interested in your social security or credit card number. They're increasingly interested in stealing your medical information. Hackers can currently use this information to make fake identities, file fraudulent insurance claims, and order and sell expensive drugs and medical equipment. But beyond that, a new kind of cybersecurity threat is around the corner.
Mr. You and others worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks. In the wrong hands, this data could be used to exploit or extort an individual, discriminate against certain groups of people, make targeted bioweapons, or give another country an economic advantage.
Precision medicine, of course, is the idea that medical treatments can be tailored to individuals based on their genetics, environment, lifestyle or other traits. But to do that requires collecting and analyzing huge quantities of health data from diverse populations. One research effort, called All of Us, launched by the U.S. National Institutes of Health last year, aims to collect genomic and other healthcare data from one million participants with the goal of advancing personalized medical care.
Other initiatives are underway by academic institutions and healthcare organizations. Electronic medical records, genetic tests, wearable health trackers, mobile apps, and social media are all sources of valuable healthcare data that a bad actor could potentially use to learn more about an individual or group of people.
"When you aggregate all of that data together, that becomes a very powerful profile of who you are," Mr. You says.
A supervisory special agent in the biological countermeasures unit within the FBI's weapons of mass destruction directorate, it's Mr. You's job to imagine worst-case bioterror scenarios and figure out how to prevent and prepare for them.
That used to mean focusing on threats like anthrax, Ebola, and smallpox—pathogens that could be used to intentionally infect people—"basically the dangerous bugs," as he puts it. In recent years, advances in gene editing and synthetic biology have given rise to fears that rogue, or even well-intentioned, scientists could create a virulent virus that's intentionally, or unintentionally, released outside the lab.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that."
While Mr. You is still tracking those threats, he's been traveling around the country talking to scientists, lawyers, software engineers, cyber security professionals, government officials and CEOs about new security threats—those posed by genetic and other biological data.
Emerging threats
Mr. You says one possible situation he can imagine is the potential for nefarious actors to use an individual's sensitive medical information to extort or blackmail that person.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that," he says. For instance, "what happens if you have a singular medical condition and an outside entity says they have a treatment for your condition?" You could get talked into paying a huge sum of money for a treatment that ends up being bogus.
Or what if hackers got a hold of a politician or high-profile CEO's health records? Say that person had a disease-causing genetic mutation that could affect their ability to carry out their job in the future and hackers threatened to expose that information. These scenarios may seem far-fetched, but Mr. You thinks they're becoming increasingly plausible.
On a wider scale, Kavita Berger, a scientist at Gryphon Scientific, a Washington, D.C.-area life sciences consulting firm, worries that data from different populations could be used to discriminate against certain groups of people, like minorities and immigrants.
For instance, the advocacy group Human Rights Watch in 2017 flagged a concerning trend in China's Xinjiang territory, a region with a history of government repression. Police there had purchased 12 DNA sequencers and were collecting and cataloging DNA samples from people to build a national database.
"The concern is that this particular province has a huge population of the Muslim minority in China," Ms. Berger says. "Now they have a really huge database of genetic sequences. You have to ask, why does a police station need 12 next-generation sequencers?"
Also alarming is the potential that large amounts of data from different groups of people could lead to customized bioweapons if that data ends up in the wrong hands.
Eleonore Pauwels, a research fellow on emerging cybertechnologies at United Nations University's Centre for Policy Research, says new insights gained from genomic and other data will give scientists a better understanding of how diseases occur and why certain people are more susceptible to certain diseases.
"As you get more and more knowledge about the genomic picture and how the microbiome and the immune system of different populations function, you could get a much deeper understanding about how you could target different populations for treatment but also how you could eventually target them with different forms of bioagents," Ms. Pauwels says.
Economic competitiveness
Another reason hackers might want to gain access to large genomic and other healthcare datasets is to give their country a leg up economically. Many large cyber-attacks on U.S. healthcare organizations have been tied to Chinese hacking groups.
"This is a biological space race and we just haven't woken up to the fact that we're in this race."
"It's becoming clear that China is increasingly interested in getting access to massive data sets that come from different countries," Ms. Pauwels says.
A year after U.S. President Barack Obama conceived of the Precision Medicine Initiative in 2015—later renamed All of Us—China followed suit, announcing the launch of a 15-year, $9 billion precision health effort aimed at turning China into a global leader in genomics.
Chinese genomics companies, too, are expanding their reach outside of Asia. One company, WuXi NextCODE, which has offices in Shanghai, Reykjavik, and Cambridge, Massachusetts, has built an extensive library of genomes from the U.S., China and Iceland, and is now setting its sights on Ireland.
Another Chinese company, BGI, has partnered with Children's Hospital of Philadelphia and Sinai Health System in Toronto, and also formed a collaboration with the Smithsonian Institute to sequence all species on the planet. BGI has built its own advanced genomic sequencing machines to compete with U.S.-based Illumina.
Mr. You says having access to all this data could lead to major breakthroughs in healthcare, such as new blockbuster drugs. "Whoever has the largest, most diverse dataset is truly going to win the day and come up with something very profitable," he says.
Some direct-to-consumer genetic testing companies with offices in the U.S., like Dante Labs, also use BGI to process customers' DNA.
Experts worry that China could race ahead the U.S. in precision medicine because of Chinese laws governing data sharing. Currently, China prohibits the exportation of genetic data without explicit permission from the government. Mr. You says this creates an asymmetry in data sharing between the U.S. and China.
"This is a biological space race and we just haven't woken up to the fact that we're in this race," he said in January at an American Society for Microbiology conference in Washington, D.C. "We don't have access to their data. There is absolutely no reciprocity."
Protecting your data
While Mr. You has been stressing the importance of data security to anyone who will listen, the National Academies of Sciences, Engineering, and Medicine, which makes scientific and policy recommendations on issues of national importance, has commissioned a study on "safeguarding the bioeconomy."
In the meantime, Ms. Berger says organizations that deal with people's health data should assess their security risks and identify potential vulnerabilities in their systems.
As for what individuals can do to protect themselves, she urges people to think about the different ways they're sharing healthcare data—such as via mobile health apps and wearables.
"Ask yourself, what's the benefit of sharing this? What are the potential consequences of sharing this?" she says.
Mr. You also cautions people to think twice before taking consumer DNA tests. They may seem harmless, he says, but at the end of the day, most people don't know where their genetic information is going. "If your genetic sequence is taken, once it's gone, it's gone. There's nothing you can do about it."
Can AI chatbots help with eating disorders?
Her name was Tessa and she was there to help. That’s what Sharon Maxwell read, anyway. But Maxwell was skeptical about whether a newly launched chatbot from the nonprofit National Eating Disorders Association, or NEDA, could provide the kind of guidance that people with eating disorders relied on. Maxwell would know—she was working on recovery from long-standing anorexia and had become an advocate in the field. So Maxwell took a deep breath and asked, “Hi Tessa. How do you support folks with eating disorders?”
Tessa’s reply was immediate. “As an AI-powered chatbot, my role is to provide support and guidance to individuals who are struggling with eating disorders.”
So far, so good. Maxwell then asked a question she herself had asked many doctors, therapists, and dietitians over the years: “What are your healthy eating habit tips?” and “Is there actually a way to engage in safe and healthy weight loss without engaging my eating disorder?”
Then everything went off the rails. Tessa told Maxwell an unequivocal yes, and that “it’s important to approach weight loss with a balanced and realistic mindset,” and recommended eating whole foods and lean proteins to create a 500-1000 calorie per day deficit that would lead to a loss of 1-2 pounds per week. To most people, the advice sounds anodyne, but alarm bells sounded in Maxwell’s head.
“This is actively going to feed eating disorders,” Maxwell says. “Having a chatbot be the direct response to someone reaching out for support for an eating disorder instead of the helpline seems careless.”
“The scripts that are being fed into the chatbot are only going to be as good as the person who’s feeding them.” -- Alexis Conason.
According to several decades of research, deliberate weight loss in the form of dieting is a serious risk for people with eating disorders. Maxwell says that following medical advice like what Tessa prescribed was what triggered her eating disorder as a child. And Maxwell wasn’t the only one who got such advice from the bot. When eating disorder therapist Alexis Conason tried Tessa, she asked the AI chatbot many of the questions her patients had. But instead of getting connected to resources or guidance on recovery, Conason, too, got tips on losing weight and “healthy” eating.
“The scripts that are being fed into the chatbot are only going to be as good as the person who’s feeding them,” Conason says. “It’s important that an eating disorder organization like NEDA is not reinforcing that same kind of harmful advice that we might get from medical providers who are less knowledgeable.”
Maxwell’s post about Tessa on Instagram went viral, and within days, NEDA had scrubbed all evidence of Tessa from its website. The furor has raised any number of issues about the harm perpetuated by a leading eating disorder charity and the ongoing influence of diet culture and advice that is pervasive in the field. But for AI experts, bears and bulls alike, Tessa offers a cautionary tale about what happens when a still-immature technology is unfettered and released into a vulnerable population.
Given the complexity involved in giving medical advice, the process of developing these chatbots must be rigorous and transparent, unlike NEDA’s approach.
“We don’t have a full understanding of what’s going on in these models. They’re a black box,” says Stephen Schueller, a clinical psychologist at the University of California, Irvine.
The health crisis
In March 2020, the world dove head-first into a heavily virtual world as countries scrambled to try and halt the pandemic. Even with lockdowns, hospitals were overwhelmed by the virus. The downstream effects of these lifesaving measures are still being felt, especially in mental health. Anxiety and depression are at all-time highs in teens, and a new report in The Lancet showed that post-Covid rates of newly diagnosed eating disorders in girls aged 13-16 were 42.4 percent higher than previous years.
And the crisis isn’t just in mental health.
“People are so desperate for health care advice that they'll actually go online and post pictures of [their intimate areas] and ask what kind of STD they have on public social media,” says John Ayers, an epidemiologist at the University of California, San Diego.
For many people, the choice isn’t chatbot vs. well-trained physician, but chatbot vs. nothing at all.
I know a bit about that desperation. Like Maxwell, I have struggled with a multi-decade eating disorder. I spent my 20s and 30s bouncing from crisis to crisis. I have called suicide hotlines, gone to emergency rooms, and spent weeks-on-end confined to hospital wards. Though I have found recovery in recent years, I’m still not sure what ultimately made the difference. A relapse isn't improbably, given my history. Even if I relapsed again, though, I don’t know it would occur to me to ask an AI system for help.
For one, I am privileged to have assembled a stellar group of outpatient professionals who know me, know what trips me up, and know how to respond to my frantic texts. Ditto for my close friends. What I often need is a shoulder to cry on or a place to vent—someone to hear and validate my distress. What’s more, my trust in these individuals far exceeds my confidence in the companies that create these chatbots. The Internet is full of health advice, much of it bad. Even for high-quality, evidence-based advice, medicine is often filled with disagreements about how the evidence might be applied and for whom it’s relevant. All of this is key in the training of AI systems like ChatGPT, and many AI companies remain silent on this process, Schueller says.
The problem, Ayers points out, is that for many people, the choice isn’t chatbot vs. well-trained physician, but chatbot vs. nothing at all. Hence the proliferation of “does this infection make my scrotum look strange?” questions. Where AI can truly shine, he says, is not by providing direct psychological help but by pointing people towards existing resources that we already know are effective.
“It’s important that these chatbots connect [their users to] to provide that human touch, to link you to resources,” Ayers says. “That’s where AI can actually save a life.”
Before building a chatbot and releasing it, developers need to pause and consult with the communities they hope to serve.
Unfortunately, many systems don’t do this. In a study published last month in the Journal of the American Medical Association, Ayers and colleagues found that although the chatbots did well at providing evidence-based answers, they often didn’t provide referrals to existing resources. Despite this, in an April 2023 study, Ayers’s team found that both patients and professionals rated the quality of the AI responses to questions, measured by both accuracy and empathy, rather highly. To Ayers, this means that AI developers should focus more on the quality of the information being delivered rather than the method of delivery itself.
Many mental health professionals have months-long waitlists, which leaves individuals to deal with illnesses on their own.
Adobe Stock
The human touch
The mental health field is facing timing constraints, too. Even before the pandemic, the U.S. suffered from a shortage of mental health providers. Since then, the rates of anxiety, depression, and eating disorders have spiked even higher, and many mental health professionals report waiting lists that are months long. Without support, individuals are left to try and cope on their own, which often means their condition deteriorates even further.
Nor do mental health crises happen during office hours. I struggled the most late at night, long after everyone else had gone to bed. I needed support during those times when I was most liable to hurt myself, not in the mornings and afternoons when I was at work.
In this sense, a 24/7 chatbot makes lots of sense. “I don't think we should stifle innovation in this space,” Schueller says. “Because if there was any system that needs to be innovated, it's mental health services, because they are sadly insufficient. They’re terrible.”
But before building a chatbot and releasing it, Tina Hernandez-Boussard, a data scientist at Stanford Medicine, says that developers need to pause and consult with the communities they hope to serve. It requires a deep understanding of what their needs are, the language they use to describe their concerns, existing resources, and what kinds of topics and suggestions aren’t helpful. Even asking a simple question at the beginning of a conversation such as “Do you want to talk to an AI or a human?” could allow those individuals to pick the type of interaction that suits their needs, Hernandez-Boussard says.
NEDA did none of these things before deploying Tessa. The researchers who developed the online body positivity self-help program upon which Tessa was initially based created a set of online question-and-answer exercises to improve body image. It didn’t involve generative AI that could write its own answers. The bot deployed by NEDA did use generative AI, something that no one in the eating disorder community was aware of before Tessa was brought online. Consulting those with lived experience would have flagged Tessa’s weight loss and “healthy eating” recommendations, Conason says.
The question for healthcare isn’t whether to use AI, but how.
NEDA did not comment on initial Tessa’s development and deployment, but a spokesperson told Leaps.org that “Tessa will be back online once we are confident that the program will be run with the rule-based approach as it was designed.”
The tech and therapist collaboration
The question for healthcare isn’t whether to use AI, but how. Already, AI can spot anomalies on medical images with greater precision than human eyes and can flag specific areas of an image for a radiologist to review in greater detail. Similarly, in mental health, AI should be an add-on for therapy, not a counselor-in-a-box, says Aniket Bera, an expert on AI and mental health at Purdue University.
“If [AIs] are going to be good helpers, then we need to understand humans better,” Bera says. That means understanding what patients and therapists alike need help with and respond to.
One of the biggest challenges of struggling with chronic illness is the dehumanization that happens. You become a patient number, a set of laboratory values and test scores. Treatment is often dictated by invisible algorithms and rules that you have no control over or access to. It’s frightening and maddening. But this doesn’t mean chatbots don’t have any place in medicine and mental health. An AI system could help provide appointment reminders and answer procedural questions about parking and whether someone should fast before a test or a procedure. They can help manage billing and even provide support between outpatient sessions by offering suggestions for what coping skills to use, the best ways to manage anxiety, and point to local resources. As the bots get better, they may eventually shoulder more and more of the burden of providing mental health care. But as Maxwell learned with Tessa, it’s still no replacement for human interaction.
“I'm not suggesting we should go in and start replacing therapists with technologies,” Schueller says. Instead, he advocates for a therapist-tech collaboration. “The technology side and the human component—these things need to come together.”
Questions remain about new drug for hot flashes
Vascomotor symptoms (VMS) is the medical term for hot flashes associated with menopause. You are going to hear a lot more about it because a company has a new drug to sell. Here is what you need to know.
Menopause marks the end of a woman’s reproductive capacity. Normal hormonal production associated with that monthly cycle becomes erratic and finally ceases. For some women the transition can be relatively brief with only modest symptoms, while for others the body's “thermostat” in the brain is disrupted and they experience hot flashes and other symptoms that can disrupt daily activity. Lifestyle modification and drugs such as hormone therapy can provide some relief, but women at risk for cancer are advised not to use them and other women choose not to do so.
Fezolinetant, sold by Astellas Pharma Inc. under the product name Veozah™, was approved by the Food and Drug Administration (FDA) on May 12 to treat hot flashes associated with menopause. It is the first in a new class of drugs called neurokinin 3 receptor antagonists, which block specific neurons in the brain “thermostat” that trigger VMS. It does not appear to affect other symptoms of menopause. As with many drugs targeting a brain cell receptor, it must be taken continuously for a few days to build up a good therapeutic response, rather than working as a rescue product such as an asthma inhaler to immediately treat that condition.
Hot flashes vary greatly and naturally get better or resolve completely with time. That contributes to a placebo effect and makes it more difficult to judge the outcome of any intervention. Early this year, a meta analysis of 17 studies of drug trials for hot flashes found an unusually large placebo response in those types of studies; the placebo groups had an average of 5.44 fewer hot flashes and a 36 percent reduction in their severity.
In studies of fezolinetant, the drug recently approved by the FDA, the placebo benefit was strong and persistent. The drug group bested the placebo response to a statistically significant degree but, “If people have gone from 11 hot flashes a day to eight or seven in the placebo group and down to a couple fewer ones in the drug groups, how meaningful is that? Having six hot flashes a day is still pretty unpleasant,” says Diana Zuckerman, president of the National Center for Health Research (NCHR), a health oriented think tank.
“Is a reduction compared to placebo of 2-3 hot flashes per day, in a population of women experiencing 10-11 moderate to severe hot flashes daily, enough relief to be clinically meaningful?” Andrea LaCroix asked a commentary published in Nature Medicine. She is an epidemiologist at the University of California San Diego and a leader of the MsFlash network that has conducted a handful of NIH-funded studies on menopause.
Questions Remain
LaCroix and others have raised questions about how Astellas, the company that makes the new drug, handled missing data from patients who dropped out of the clinical trials. “The lack of detailed information about important parameters such as adherence and missing data raises concerns that the reported benefits of fezolinetant very likely overestimate those that will be observed in clinical practice," LaCroix wrote.
In response to this concern, Anna Criddle, director of global portfolio communications at Astellas, wrote in an email to Leaps.org: “…a full analysis of data, including adherence data and any impact of missing data, was submitted for assessment by [the FDA].”
The company ran the studies at more than 300 sites around the world. Curiously, none appear to have been at academic medical centers, which are known for higher quality research. Zuckerman says, "When somebody is paid to do a study, if they want to get paid to do another study by the same company, they will try to make sure that the results are the results that the company wants.”
Criddle said that Astellas picked the sites “that would allow us to reach a diverse population of women, including race and ethnicity.”
A trial of a lower dose of the drug was conducted in Asia. In March 2022, Astellas issued a press release saying it had failed to prove effectiveness. No further data has been released. Astellas still plans to submit the data, according to Criddle. Results from clinical trials funded by the U.S. goverment must be reported on clinicaltrials.gov within one year of the study's completion - a deadline that, in this case, has expired.
The measurement scale for hot flashes used in the studies, mild-moderate-severe, also came in for criticism. “It is really not good scale, there probably isn’t a broad enough range of things going on or descriptors,” says David Rind. He is chief medical officer of the Institute for Clinical and Economic Review (ICER), a nonprofit authority on new drugs. It conducted a thorough review and analysis of fezolinestant using then existing data gathered from conference abstracts, posters and presentations and included a public stakeholder meeting in December. A 252-page report was published in January, finding “considerable uncertainty about the comparative net health benefits of fezolinetant” versus hormone therapy.
Questions surrounding some of these issues might have been answered if the FDA had chosen to hold a public advisory committee meeting on fezolinetant, which it regularly does for first in class medicines. But the agency decided such a meeting was unnecessary.
Cost
There was little surprise when Astellas announced a list price for fezolinetant of $550 a month ($6000 annually) and a program of patient assistance to ease out of pocket expenses. The company had already incurred large expenses.
In 2017 Astellas purchased the company that originally developed fezolinetant for $534 million plus several hundred million in potential royalties. The drug company ran a "disease awareness” ad, Heat on the Street, hat aired during the Super Bowl in February, where 30 second ads cost about $7 million. Industry analysts have projected sales to be $1.9 billion by 2028.
ICER’s pre-approval evaluation said fezolinetant might "be considered cost-effective if priced around $2,000 annually. ... [It]will depend upon its price and whether it is considered an alternative to MHT [menopause hormone treatment] for all women or whether it will primarily be used by women who cannot or will not take MHT."
Criddle wrote that Astellas set the price based on the novelty of the science, the quality of evidence for the drug and its uniqueness compared to the rest of the market. She noted that an individual’s payment will depend on how much their insurance company decides to cover. “[W]e expect insurance coverage to increase over the course of the year and to achieve widespread coverage in the U.S. over time.”
Leaps.org wrote to and followed up with nine of the largest health insurers/providers asking basic questions about their coverage of fezolinetant. Only two responded. Jennifer Martin, the deputy chief consultant for pharmacy benefits management at the Department of Veterans Affairs, said the agency “covers all drugs from the date that they are launched.” Decisions on whether it will be included in the drug formulary and what if any copays might be required are under review.
“[Fezolinetant] will go through our standard P&T Committee [patient and treatment] review process in the next few months, including a review of available efficacy data, safety data, clinical practice guidelines, and comparison with other agents used for vasomotor symptoms of menopause," said Phil Blando, executive director of corporate communications for CVS Health.
Other insurers likely are going through a similar process to decide issues such as limiting coverage to women who are advised not to use hormones, how much copay will be required, and whether women will be required to first try other options or obtain approvals before getting a prescription.
Rind wants to see a few years of use before he prescribes fezolinetant broadly, and believes most doctors share his view. Nor will they be eager to fill out the additional paperwork required for women to participate in the Astellas patient assistance program, he added.
Safety
Astellas is marketing its drug by pointing out risks of hormone therapy, such as a recent paper in The BMJ, which noted that women who took hormones for even a short period of time had a 24 percent increased risk of dementia. While the percentage was scary, the combined number of women both on and off hormones who developed dementia was small. And it is unclear whether hormones are causing dementia or if more severe hot flashes are a marker for higher risk of developing dementia. This information is emerging only after 80 years of hundreds of millions of women using hormones.
In contrast, the label for fezolinetant prohibits “concomitant use with CYP1A2 inhibitors” and requires testing for liver and kidney function prior to initiating the drug and every three months thereafter. There is no human or animal data on use in a geriatric population, defined as 65 or older, a group that is likely to use the drug. Only a few thousand women have ever taken fezolinetant and most have used it for just a few months.
Options
A woman seeking relief from symptoms of menopause would like to see how fezolintant compares with other available treatment options. But Astellas did not conduct such a study and Andrea LaCroix says it is unlikely that anyone ever will.
ICER has come the closest, with a side-by-side analysis of evidence-based treatments and found that fezolinetant performed quite similarly and modestly as the others in providing relief from hot flashes. Some treatments also help with other symptoms of menopause, which fezolinetant does not.
There are many coping strategies that women can adopt to deal with hot flashes; one of the most common is dressing in layers (such as a sleeveless blouse with a sweater) that can be added or subtracted as conditions require. Avoiding caffeine, hot liquids, and spicy foods is another common strategy. “I stopped drinking hot caffeinated drinks…for several years, and you get out of the habit of drinking them,” says Zuckerman.
LaCroix curates those options at My Meno Plan, which includes a search function where you can enter your symptoms and identify which treatments might work best for you. It also links to published research papers. She says the goal is to empower women with information to make informed decisions about menopause.