What the Colonial Pipeline cyber attack means for healthcare
The cyber attack on Colonial Pipeline, the largest fuel pipeline in the US, has had grave ramifications not only for the energy sector, but for many other industries demonstrating just how important it is to protect national infrastructure.
In the healthcare sector this is more critical than ever. In 2020 healthcare-related cyber attacks rose by 55%. With the rise in digitalisation and healthcare becoming increasingly connected, it is also becoming more at risk of cyber crime. Cyber attacks on IoT devices surged by 300% in 2019 alone, accounting for more than 2.9 billion events.
A recent survey by software security company Irdeto of senior executives at Fortune 1000-sized US companies within various Internet of Medical Things (IoMT) fields, revealed that ransomware attacks on hospital networks and medical devices are skyrocketing. Their research shows that 80% of survey participants report having suffered at least one cyber attack in the past five years, and face dozens of additional threats on a daily basis.
The most common attacks were ransomware, malware, phishing, spoofing and DDoS, with customer databases, employee information and even R&D platforms being exploited.
Despite this 88% of medtech executives said they are not prepared for a cyber attack and only 18% believe the security built into their medical device products is strong.
"Connected medical devices are increasingly the target of cyber attacks, and the attack on the Colonial Pipeline underscores how critical it is to prepare the IoMT industry for cyberattacks" Steeve Huin, CMO at Irdeto says.
"The hack is another proof point that vulnerabilities will be exploited and the healthcare industry needs to employ adequate security measures and have a plan in place for not if, but when an attack occurs" he adds.
"Medical records are a precious resource on the dark web today, raking in upwards of $250-$1,000 apiece, as they enable bad actors to take over identities, commit health insurance fraud, and more. Patients expect that their data will be well protected, and this will become a determining factor to their choices for selecting a care provider, medical device, virtual care solution, and other healthcare options going forward."
For healthcare organisations to protect themselves, Huin recommends taking the following steps:
- Employ basic network security for existing medical infrastructure
- Procure connected medical devices that employ best in class security, and keep them up to date against new threats
- Put a plan in place with someone responsible to trigger actions and coordinate an immediate response should an issue arise
How health plans can reduce healthcare inequalities
The COVID-19 pandemic has put inequalities accessing the healthcare system in the spotlight. Jim Clement, Vice President of Product & Services at cloud provider Inovalon, tells us that health plans play the most integral role in advancing the health equity movement.
Why did it a global pandemic to highlight the issue of healthcare inequities?
Health inequity in the US has been well understood by healthcare professionals for many years, but it has become more evident due to the COVID-19 pandemic. It wasn’t until the racial and ethnic differential seen in response to COVID-19 related infections, deaths and vaccinations that many Americans became acutely aware of the health inequity due to sociodemographic factors such as race, geography, education and income.
Fortunately, there’s now a growing health equity movement afoot in America which aims to improve public health and achieve equity in health status for all people by ensuring opportunities are available to attain the highest level of health. While the entire healthcare ecosystem is important to this transformation, it is health plans that arguably play the most integral role.
How can health plans help?
Achieving health equity means obstacles to health must be removed, including poverty, discrimination, powerlessness, and lack of access to the basics like physicians, hospitals, medicine, technology, and health education. This is not only a social justice initiative, but also a clear call to action for health plan organisations that are bearing the economic brunt of the costs due to health disparities.
Health plan organisations that recognise the alignment between efforts to improve health equity and broader member engagement initiatives will be in the best position to move the needle. Plans must also understand that the provision of medical services within hospital walls, physician offices and other health services providers is necessary, but not sufficient.
By recognising that health inequity also includes non-medical factors such as employment, income, housing, transportation, childcare, and more, plans will be better equipped to ensure their members are set up for success.
What do healthcare providers need to do generally to address inequities?
Outreach by both health plans and providers is critical to ensuring people have knowledge of available services, the reason those services are critical to their health, and options to access those services based on their unique circumstances. With both stakeholders beating the same drum, progress can be made quickly.
Given the impact of social determinants of health (SDOH), should healthcare providers take a more active role in addressing these, or other agencies?
While communicating with patients is critically important, what is truly required to address inequalities is helping patients take medical actions – like regular PCP visits, monitoring A1C and accepting health coaching – that are necessary to maximise their health, along with non-medical actions –like availing themselves of community resources that address homelessness, food insecurity and employment services.
The most progressive providers and payers have or are putting in place programs to address these non-medical issues. In addition, non-medical tools such as transportation services can certainly help drive the effectiveness of medical services.
How important is it to educate patients about their health and how can this be done?
Education is a social determinant of health and a key lever to be used to drive health equity. Patients who do not understand their medical conditions or the consequences of non-compliance with their treatment plans are prone to poor outcomes.
For health plans, understanding member needs is one of the biggest drivers of quality care. A continuous cycle of engagement through feedback and appropriate responses will provide health plans with an opportunity to uncover, discuss, and resolve problems faster.
Improving member outreach and engagement can be made easier with a programmatic approach involving four stages of intentional outreach: Getting to know your members, educating members, seeking feedback from members and gaining member loyalty. Each stage not only contributes to a better member experience but also to improved outcomes and higher satisfaction scores.
Now that the issue has come to the fore, what do you think things will look like in 5 years or so?
I predict that health plans that get member engagement, education and equity right will achieve better health and greater value, faster. Those who get it wrong or delay will suffer the consequences of competitive disadvantage and pay a larger share of the rising costs associated with health inequity.