Bad Actors Getting Your Health Data Is the FBI’s Latest Worry
In February 2015, the health insurer Anthem revealed that criminal hackers had gained access to the company's servers, exposing the personal information of nearly 79 million patients. It's the largest known healthcare breach in history.
FBI agents worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks.
That year, the data of millions more would be compromised in one cyberattack after another on American insurers and other healthcare organizations. In fact, for the past several years, the number of reported data breaches has increased each year, from 199 in 2010 to 344 in 2017, according to a September 2018 analysis in the Journal of the American Medical Association.
The FBI's Edward You sees this as a worrying trend. He says hackers aren't just interested in your social security or credit card number. They're increasingly interested in stealing your medical information. Hackers can currently use this information to make fake identities, file fraudulent insurance claims, and order and sell expensive drugs and medical equipment. But beyond that, a new kind of cybersecurity threat is around the corner.
Mr. You and others worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks. In the wrong hands, this data could be used to exploit or extort an individual, discriminate against certain groups of people, make targeted bioweapons, or give another country an economic advantage.
Precision medicine, of course, is the idea that medical treatments can be tailored to individuals based on their genetics, environment, lifestyle or other traits. But to do that requires collecting and analyzing huge quantities of health data from diverse populations. One research effort, called All of Us, launched by the U.S. National Institutes of Health last year, aims to collect genomic and other healthcare data from one million participants with the goal of advancing personalized medical care.
Other initiatives are underway by academic institutions and healthcare organizations. Electronic medical records, genetic tests, wearable health trackers, mobile apps, and social media are all sources of valuable healthcare data that a bad actor could potentially use to learn more about an individual or group of people.
"When you aggregate all of that data together, that becomes a very powerful profile of who you are," Mr. You says.
A supervisory special agent in the biological countermeasures unit within the FBI's weapons of mass destruction directorate, it's Mr. You's job to imagine worst-case bioterror scenarios and figure out how to prevent and prepare for them.
That used to mean focusing on threats like anthrax, Ebola, and smallpox—pathogens that could be used to intentionally infect people—"basically the dangerous bugs," as he puts it. In recent years, advances in gene editing and synthetic biology have given rise to fears that rogue, or even well-intentioned, scientists could create a virulent virus that's intentionally, or unintentionally, released outside the lab.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that."
While Mr. You is still tracking those threats, he's been traveling around the country talking to scientists, lawyers, software engineers, cyber security professionals, government officials and CEOs about new security threats—those posed by genetic and other biological data.
Emerging threats
Mr. You says one possible situation he can imagine is the potential for nefarious actors to use an individual's sensitive medical information to extort or blackmail that person.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that," he says. For instance, "what happens if you have a singular medical condition and an outside entity says they have a treatment for your condition?" You could get talked into paying a huge sum of money for a treatment that ends up being bogus.
Or what if hackers got a hold of a politician or high-profile CEO's health records? Say that person had a disease-causing genetic mutation that could affect their ability to carry out their job in the future and hackers threatened to expose that information. These scenarios may seem far-fetched, but Mr. You thinks they're becoming increasingly plausible.
On a wider scale, Kavita Berger, a scientist at Gryphon Scientific, a Washington, D.C.-area life sciences consulting firm, worries that data from different populations could be used to discriminate against certain groups of people, like minorities and immigrants.
For instance, the advocacy group Human Rights Watch in 2017 flagged a concerning trend in China's Xinjiang territory, a region with a history of government repression. Police there had purchased 12 DNA sequencers and were collecting and cataloging DNA samples from people to build a national database.
"The concern is that this particular province has a huge population of the Muslim minority in China," Ms. Berger says. "Now they have a really huge database of genetic sequences. You have to ask, why does a police station need 12 next-generation sequencers?"
Also alarming is the potential that large amounts of data from different groups of people could lead to customized bioweapons if that data ends up in the wrong hands.
Eleonore Pauwels, a research fellow on emerging cybertechnologies at United Nations University's Centre for Policy Research, says new insights gained from genomic and other data will give scientists a better understanding of how diseases occur and why certain people are more susceptible to certain diseases.
"As you get more and more knowledge about the genomic picture and how the microbiome and the immune system of different populations function, you could get a much deeper understanding about how you could target different populations for treatment but also how you could eventually target them with different forms of bioagents," Ms. Pauwels says.
Economic competitiveness
Another reason hackers might want to gain access to large genomic and other healthcare datasets is to give their country a leg up economically. Many large cyber-attacks on U.S. healthcare organizations have been tied to Chinese hacking groups.
"This is a biological space race and we just haven't woken up to the fact that we're in this race."
"It's becoming clear that China is increasingly interested in getting access to massive data sets that come from different countries," Ms. Pauwels says.
A year after U.S. President Barack Obama conceived of the Precision Medicine Initiative in 2015—later renamed All of Us—China followed suit, announcing the launch of a 15-year, $9 billion precision health effort aimed at turning China into a global leader in genomics.
Chinese genomics companies, too, are expanding their reach outside of Asia. One company, WuXi NextCODE, which has offices in Shanghai, Reykjavik, and Cambridge, Massachusetts, has built an extensive library of genomes from the U.S., China and Iceland, and is now setting its sights on Ireland.
Another Chinese company, BGI, has partnered with Children's Hospital of Philadelphia and Sinai Health System in Toronto, and also formed a collaboration with the Smithsonian Institute to sequence all species on the planet. BGI has built its own advanced genomic sequencing machines to compete with U.S.-based Illumina.
Mr. You says having access to all this data could lead to major breakthroughs in healthcare, such as new blockbuster drugs. "Whoever has the largest, most diverse dataset is truly going to win the day and come up with something very profitable," he says.
Some direct-to-consumer genetic testing companies with offices in the U.S., like Dante Labs, also use BGI to process customers' DNA.
Experts worry that China could race ahead the U.S. in precision medicine because of Chinese laws governing data sharing. Currently, China prohibits the exportation of genetic data without explicit permission from the government. Mr. You says this creates an asymmetry in data sharing between the U.S. and China.
"This is a biological space race and we just haven't woken up to the fact that we're in this race," he said in January at an American Society for Microbiology conference in Washington, D.C. "We don't have access to their data. There is absolutely no reciprocity."
Protecting your data
While Mr. You has been stressing the importance of data security to anyone who will listen, the National Academies of Sciences, Engineering, and Medicine, which makes scientific and policy recommendations on issues of national importance, has commissioned a study on "safeguarding the bioeconomy."
In the meantime, Ms. Berger says organizations that deal with people's health data should assess their security risks and identify potential vulnerabilities in their systems.
As for what individuals can do to protect themselves, she urges people to think about the different ways they're sharing healthcare data—such as via mobile health apps and wearables.
"Ask yourself, what's the benefit of sharing this? What are the potential consequences of sharing this?" she says.
Mr. You also cautions people to think twice before taking consumer DNA tests. They may seem harmless, he says, but at the end of the day, most people don't know where their genetic information is going. "If your genetic sequence is taken, once it's gone, it's gone. There's nothing you can do about it."
On today’s podcast episode, I had a chance to speak with Shai Efrati, a physician and professor in the schools of medicine and neuroscience at Tel Aviv University. Efrati also directs the Sagol Center for Hyperbaric Medicine and Research, and our conversation in this episode focuses on the potential health benefits of hyperbaric oxygen therapy.
Efrati's studies point to a connection between the use of hyperbaric chambers and improvements for a range of health problems such as Long Covid, strokes and traumatic brain injuries. Plus, Efrati has an early line of research suggesting that hyperbaric oxygen therapy could help protect against cognitive decline in healthy people and perhaps even slow down the overall aging process.
We talk about what’s going in on the body during hyperbaric oxygen therapy that could possibly lead to transformative benefits for patients, some of whom had searched for treatments previously and come up empty. We also discuss exactly where Efrati is with this line of inquiry, both what his studies have shown and the great deal of additional research that’s needed before the healthcare system can and should fully embrace hyperbaric oxygen therapy.
Efrati and I talk about why you can’t just go on Amazon and buy something that says hyperbaric – the only way it can have a positive effect is if you access the real version of the chamber and use it correctly under the supervision of a knowledgeable physician.
I also ask Efrati what we know about the short- and long-term risks for those who follow the research-based protocol on a regular basis. And what about accessibility to people without a lot of extra cash to spend on their health? Efrati is already rolling out this therapy at a small number of specialized clinics in places like the Villages retirement community in Florida.
Shai Efrati
A vaccine for Lyme disease could be coming. But will patients accept it?
For more than two decades, Marci Flory, a 40-year-old emergency room nurse from Lawrence, Kan., has battled the recurring symptoms of chronic Lyme disease, an illness which she believes began after being bitten by a tick during her teenage years.
Over the years, Flory has been plagued by an array of mysterious ailments, ranging from fatigue to crippling pain in her eyes, joints and neck, and even postural tachycardia syndrome or PoTS, an abnormal increase in heart rate after sitting up or standing. Ten years ago, she began to experience the onset of neurological symptoms which ranged from brain fog to sudden headaches, and strange episodes of leg weakness which would leave her unable to walk.
“Initially doctors thought I had ALS, or less likely, multiple sclerosis,” she says. “But after repeated MRI scans for a year, they concluded I had a rare neurological condition called acute transverse myelitis.”
But Flory was not convinced. After ordering a variety of private blood tests, she discovered she was infected with a range of bacteria in the genus Borrelia that live in the guts of ticks, the infectious agents responsible for Lyme disease.
“It made sense,” she says. “Looking back, I was bitten in high school and misdiagnosed with mononucleosis. This was probably the start, and my immune system kept it under wraps for a while. The Lyme bacteria can burrow into every tissue in the body, go into cyst form and become dormant before reactivating.”
The reason why cases of Lyme disease are increasing is down to changing weather patterns, triggered by climate change, meaning that ticks are now found across a much wider geographic range than ever before.
When these species of bacteria are transmitted to humans, they can attack the nervous system, joints and even internal organs which can lead to serious health complications such as arthritis, meningitis and even heart failure. While Lyme disease can sometimes be successfully treated with antibiotics if spotted early on, not everyone responds to these drugs, and for patients who have developed chronic symptoms, there is no known cure. Flory says she knows of fellow Lyme disease patients who have spent hundreds of thousands of dollars seeking treatments.
Concerningly, statistics show that Lyme and other tick-borne diseases are on the rise. Recently released estimates based on health insurance records suggest that at least 476,000 Americans are diagnosed with Lyme disease every year, and many experts believe the true figure is far higher.
The reason why the numbers are growing is down to changing weather patterns, triggered by climate change, meaning that ticks are now found across a much wider geographic range than ever before. Health insurance data shows that cases of Lyme disease have increased fourfold in rural parts of the U.S. over the last 15 years, and 65 percent in urban regions.
As a result, many scientists who have studied Lyme disease feel that it is paramount to bring some form of protective vaccine to market which can be offered to people living in the most at-risk areas.
“Even the increased awareness for Lyme disease has not stopped the cases,” says Eva Sapi, professor of cellular and molecular biology at the University of New Haven. “Some of these patients are looking for answers for years, running from one doctor to another, so that is obviously a very big cost for our society at so many levels.”
Emerging vaccines – and backlash
But with the rising case numbers, interest has grown among the pharmaceutical industry and research communities. Vienna-based biotech Valneva have partnered with Pfizer to take their vaccine – a seasonal jab which offers protection against the six most common strains of Lyme disease in the northern hemisphere – into a Phase III clinical trial which began in August. Involving 6,000 participants in a number of U.S. states and northern Europe where Lyme disease is endemic, it could lead to a licensed vaccine by 2025, if it proves successful.
“For many years Lyme was considered a small market vaccine,” explains Monica E. Embers, assistant professor of parasitology at Tulane University in New Orleans. “Now we know that this is a much bigger problem, Pfizer has stepped up to invest in preventing this disease and other pharmaceutical companies may as well.”
Despite innovations, patient communities and their representatives remain ambivalent about the idea of a vaccine. Some of this skepticism dates back to the failed LYMErix vaccine which was developed in the late 1990s before being withdrawn from the market.
At the same time, scientists at Yale University are developing a messenger RNA vaccine which aims to train the immune system to respond to tick bites by exposing it to 19 proteins found in tick saliva. Whereas the Valneva vaccine targets the bacteria within ticks, the Yale vaccine attempts to provoke an instant and aggressive immune response at the site of the bite. This causes the tick to fall off and limits the potential for transmitting dangerous infections.
But despite these innovations, patient communities and their representatives remain ambivalent about the idea of a vaccine. Some of this skepticism dates back to the failed LYMErix vaccine which was developed in the late 1990s before being withdrawn from the market in 2002 after concerns were raised that it might induce autoimmune reactions in humans.
While this theory was ultimately disproved, the lingering stigma attached to LYMErix meant that most vaccine manufacturers chose to stay away from the disease for many years, something which Gregory Poland, head of the Mayo Clinic’s Vaccine Research Group in Minnesota, describes as a tragedy.
“Since 2002, we have not had a human Lyme vaccine in the U.S. despite the increasing number of cases,” says Poland. “Pretty much everyone in the field thinks they’re ten times higher than the official numbers, so you’re probably talking at least 400,000 each year. It’s an incredible burden but because of concerns about anti-vax protestors, until very recently, no manufacturer has wanted to touch this.”
Such was the backlash surrounding the failed LYMErix program that scientists have even explored the most creative of workarounds for protecting people in tick-populated regions, without needing to actually vaccinate them. One research program at the University of Tennessee came up with the idea of leaving food pellets containing a vaccine in woodland areas with the idea that rodents would eat the pellets, and the vaccine would then kill Borrelia bacteria within any ticks which subsequently fed on the animals.
Even the Pfizer-Valneva vaccine has been cautiously designed to try and allay any lingering concerns, two decades after LYMErix. “The concept is the same as the original LYMErix vaccine, but it has been made safer by removing regions that had the potential to induce autoimmunity,” says Embers. “There will always be individuals who oppose vaccines, Lyme or otherwise, but it will be a tremendous boost to public health to have the option.”
Vaccine alternatives
Researchers are also considering alternative immunization approaches in case sufficiently large numbers of people choose to reject any Lyme vaccine which gets approved. Researchers at UMass Chan Medical School have developed an artificially generated antibody, administered via an annual injection, which is capable of killing Borrelia bacteria in the guts of ticks before they can get into the human host.
So far animal studies have shown it to be 100 percent effective, while the scientists have completed a Phase I trial in which they tested it for safety on 48 volunteers in Nebraska. Because this approach provides the antibody directly, rather than triggering the human immune system to produce the antibody like a vaccine would, Embers predicts that it could be a viable alternative for the vaccine hesitant as well as providing an option for immunocompromised individuals who cannot produce enough of their own antibodies.
At the same time, many patient groups still raise concerns over the fact that numerous diagnostic tests for Lyme disease have been reported to have a poor accuracy. Without this, they argue that it is difficult to prove whether vaccines or any other form of immunization actually work. “If the disease is not understood enough to create a more accurate test and a universally accepted treatment protocol, particularly for those who weren’t treated promptly, how can we be sure about the efficacy of a vaccine?” says Natasha Metcalf, co-founder of the organization Lyme Disease UK.
Flory points out that there are so many different types of Borrelia bacteria which cause Lyme disease, that the immunizations being developed may only stop a proportion of cases. In addition, she says that chronic Lyme patients often report a whole myriad of co-infections which remain poorly understood and are likely to also be involved in the disease process.
Marci Flory undergoes an infusion in an attempt to treat her Lyme disease symptoms.
Marci Flory
“I would love to see an effective Lyme vaccine but I have my reservations,” she says. “I am infected with four types of Borrelia bacteria, plus many co-infections – Babesia, Bartonella, Erlichiosis, Rickettsia, and Mycoplasma – all from a single Douglas County Kansas tick bite. Lyme never travels alone and the vaccine won’t protect against all the many strains of Borrelia and co-infections.”
Valneva CEO Thomas Lingelbach admits that the Pfizer-Valneva vaccine is not perfect, but predicts that it will still have significant impact if approved.
“We expect the vaccine to have 75 percent plus efficacy,” he says. “There is this legacy around the old Lyme vaccines, but the world is very, very different today. The number of clinical manifestations known to be caused by infection with Lyme Borreliosis has significantly increased, and the understanding around severity has certainly increased.”
Embers agrees that while it will still be important for doctors to monitor for other tick-borne infections which are not necessarily covered by the vaccine, having any clinically approved jab would still represent a major step forward in the fight against the disease.
“I think that any vaccine must be properly vetted, and these companies are performing extensive clinical trials to do just that,” she says. “Lyme is the most common tick-borne disease in the U.S. so the public health impact could be significant. However, clinicians and the general public must remain aware of all of the other tick-borne diseases such as Babesia and Anaplasma, and continue to screen for those when a tick bite is suspected.”