Led by College of Minnesota Community Well being researchers, the Trends in Ransomware Assaults on U.S. Hospitals, Clinics and Other Health and fitness Treatment Supply Businesses analyze quantified the frequency and qualities of ransomware attacks on the health care sector from 2016 to 2021.
WHY IT Issues
Ransomware teams are generally aggressive on vital infrastructure like energy, health care and govt. And the increasing frequency and severity of ransomware assaults on hospitals and health care organizations can disrupt functions and individual access for weeks or even months.
The dangers of remaining strike conflate a quantity of issues – decline of obtain to crucial health information, the high costs of responding to and avoiding cyberattacks and threats to patient protection – that have mostly shifted focus to the protection of healthcare infrastructure.
For the examine, the public well being scientists appeared at the date of ransomware attacks, community reporting, personalized health and fitness information and facts publicity, the standing of encrypted/stolen information subsequent the assault, the kind of healthcare shipping group influenced and operational disruption all through an assault.
Some of the essential results are:
From 2016 to 2021, the annual amount of ransomware attacks a lot more than doubled from 43 to 91.
Pretty much 50 percent, or 44.4{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of the cohort, disrupted the supply of health care.
30-two attacks, or 8.6{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of the cohort, led to functions disruptions of much more than two weeks.
Somewhere around a single in five (20.6{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}) of health care businesses described being in a position to restore details from backups.
Typical disruptions bundled electronic process downtime, 41.7{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}, cancellations of scheduled treatment, 10.2{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}, and ambulance diversion 4.3{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}.
Knowledge exposure following an incident is a important issue for ransomware victims as hospitals and healthcare systems are needed less than HIPAA to protect patient information.
The cohort incidents uncovered the PHI of a lot more sufferers, say researchers.
“For 59 ransomware assaults (15.8{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}), there was evidence that ransomware actors experienced built some or all of the stolen PHI public, usually by posting it on dark world wide web forums where stolen facts are marketed for sale by including a subset of information,” according to the JAMA abstract.
Researchers noted they located increasing lags in reporting ransomware incidents above the analyze period of time, with a person in 5 attacks not existing in the U.S. Division of Health & Human Companies Office for Civil Rights database.
As a final result, “several of the stats claimed in this article are possible underestimates because of to underreporting,” they said.
The absence may well be owing to lower PHI exposure, under steering from HHS that states HIPAA-lined entities and their business enterprise associates do not need to report incidents if they show a lower chance that PHI has been exposed.
THE Bigger Trend
The university researchers stated that ransomware ever more impacted substantial businesses with several services in the course of the examine period of time.
In June 2022, Sophos found that ransomware assaults on healthcare entities doubled from 2020 to 2021 in a poll of much more than 5,000 IT gurus.
“Health care saw the highest increase in volume of cyber assaults (69{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}) as effectively as the complexity of cyber attacks (67{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}) compared to the cross-sector average of 57{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} and 59{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} respectively,” the Sophos researchers reported.
“In conditions of the effect of these cyber assaults, healthcare was the next most influenced sector (59{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}) in contrast to the world-wide normal of 53{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}.”
ON THE File
“This cohort review of ransomware attacks documented progress in their frequency and sophistication,” the scientists stated in the research report.
“Ransomware assaults disrupt care shipping and jeopardize information integrity. Latest checking/reporting initiatives present limited information and facts and could be expanded to perhaps produce a additional entire look at of how this developing kind of cybercrime influences the delivery of health care.”
Andrea Fox is senior editor of Health care IT News. Email: afox@himss.org Health care IT News is a HIMSS publication.
On a sunny September evening in 2021, Nathaniel Sean Stringer joined family and colleagues for a recovery celebration at a park in the eastern Oregon town of Ontario. To enthusiastic applause, he received an award for his service to those struggling with addiction.
Just weeks later, Stringer overdosed on fentanyl and died inside a grocery store. He was 35.
His death shows how fragile recovery from addiction can be — and his story highlights a major pressure point in Oregon’s expanding addiction care system at a pivotal time.
Before he died, Stringer exemplified a growing statewide trend. He worked for the Malheur County Health Department as a peer mentor. “Peers” are people in recovery from addiction who engage with people who use drugs, offering mentorship and resources while demonstrating by example that recovery is possible. There are nearly 1,900 peers who specialize in addiction in Oregon, typically earning about $18 to $24 an hour.
Now, using money generated through Oregon’s 2020 drug decriminalization law, Measure 110, a state-appointed council is pouring money into hiring many more peers as part of a shift toward treating addiction as a health care issue. Increasingly, peers across Oregon are connecting with people in need through street outreach and working in addiction care, mental health or homeless services, hospitals and jails.
Origins Faith Community is a nonprofit day shelter for people experiencing homelessness in Ontario, Ore. On Oct. 13, 2022, Anthony Caliendo walks through the dining room before the day’s lunch is served.
Kyle Green for The Lund Report
But without adequate funding for detox facilities for withdrawal management, residential treatment and recovery housing, people inside the system say the state’s burgeoning peer workforce amounts to a pipeline that often leads nowhere.
A recent analysis from Oregon Health & Science University showed that Oregon’s addiction care system is half the size it should be to meet demand.
Stringer was hired before Measure 110 was implemented and those close to him believe factors outside his job drove his relapse. What’s clear, however, is that while people in the peer mentor role are tasked with motivating people to seek treatment, they — like Stringer did — frequently grasp for resources that don’t exist when their clients are ready to quit using. The situation puts tremendous stress on the very people on which the system’s current expansion relies.
“I absolutely believe in peers, I believe that they are the best people to engage people who are using drugs into treatment,” said Sarah Poe, director of the Malheur County Health Department, where Stringer worked. But peers don’t themselves provide treatment and without more services to connect people to, she said, “It’s really hard work for peers to show up and keep trying to push this boulder up a hill — when the hill keeps getting more steep.”
‘He was those people’s hope’
Stringer grew up in Nyssa, a small rural community where both his parents were educators and his grandfather raised sheep. Nyssa sits west of the Idaho border, south of Ontario. In an area known for its crops and cattle, the dusty landscape is dotted with small, well-weathered homes. Malheur County has Oregon’s lowest median income.
Starting with oxycodone as a teenager and then heroin as a college student, Stringer wrestled with addiction for 15 years, going in and out of treatment. His mother, Sherry Stringer, said that one time he vomited before getting into her car after graduating early from an inpatient program. He told her it was because he was afraid of what might come next.
And yet counselors at every treatment center her son went to told her that he was so good at helping others in the program.
“I remember thinking so many times,” she said, “why can’t he help himself?”
Eventually, he did. In 2019, Stringer was a proud father and three years into his recovery as he neared completion of an intensive drug court diversion program. He single-handedly opened a nonprofit syringe exchange to help prevent the spread of disease through intravenous drug use, a need he knew was great. That’s when he connected with health staff at Malheur County for advice on the medical aspects of running an exchange.
County staff were so impressed with Stringer, they later asked if he’d like to work in their new peer support program. He jumped at the opportunity.
In many ways, the job was a perfect fit. His family and friends described him as charismatic, known for his levity. He was empathetic, non-judgmental and defended the underdog. His uncle remembers him in his youth sticking up for a soccer teammate bullied for not being able to afford a uniform.
Stringer was skilled at connecting with clients. Having once contracted Hepatitis C from injecting drugs, he followed up with county clinic patients who had just tested positive, knowing they likely got it the same way. He let them know he had stopped using and could help them do the same.
A video of him accepting the award at the recovery event shows Stringer telling the crowd he loved “every single day” of his job at the county. “The outreach we do is just so important. I get to feel like we are making a difference on the ground, which is what it’s all about.”
But the traits that made him good at his job also added to his stress. His family said it weighed heavily on him when he couldn’t connect his clients to the treatment they needed.
“He was frustrated that there weren’t enough resources,” his uncle, Matt Stringer, said. In the absence of treatment beds, he remembers his nephew considered letting clients stay at his home so they could stop using.
Nathaniel Stringer’s uncle, Matt Stringer, sits on his back porch in Ontario, Ore., on Oct. 13, 2022. A retired music marketing executive, Stringer returned to Malheur County from New York to care for his mother when she was ill.
Emily Green/The Lund Report
The results of a 2020 statewide survey of Oregon peers indicate the pressure felt by Stringer is mirrored across the state. Participants listed the lack of services for clients as a major challenge, “specifically treatment and housing.”
“When you have two or three or four clients that are needing support right now and you’re driving them around to each detox center, making phone calls, calling your personal contacts and then nothing is happening — it’s defeating,” Amanda Esquivel, who has worked as a peer recovery mentor in Portland for the past two years, told The Lund Report in September. “I did that this morning … right now, that individual is waiting at home to get into detox.”
In the weeks leading up to Stringer’s death, his uncle noticed subtle signs that his nephew might not be OK. Pandemic stress and feelings of helplessness around situations with friends and family that were out of his control were climaxing. But he insisted he was fine, colleagues said.
Peers interviewed for this story said it can be hard for people whose jobs are intertwined with their recovery to ask for help when they need it. And peers may fear losing their jobs if they relapse.
Morgan Godvin, a person in recovery who sits on the council implementing Oregon’s drug decriminalization law, is open about this dilemma. If she relapsed, she would “probably hide it,” she said on Twitter. “It would be so profoundly disappointing to everyone who has invested their time and resources in me. I fought really hard to stop being a bitter disappointment. I can’t go back there.”
On Oct. 17, 2021, Stringer went to an Albertson’s grocery store not far from Ontario, over the Idaho state line. He walked into the bathroom and consumed a substance containing a fatal amount of fentanyl, his family said.
His family and friends believe it was a momentary lapse.
A picture of Nathaniel Sean Stringer hangs on a wall inside the Malheur County Health Department outside the room where his office used to be on Oct. 13, 2022.
Emily Green/The Lund Report
Stringer left behind a wife of one year, a 3-year-old son and a 12-year-old stepson. His death sent waves of shock and grief through eastern Oregon’s recovery community, which included many people he had helped and who looked up to him.
“That’s what broke my heart,” his uncle told The Lund Report. “He was those people’s hope — and then that happens to him?”
Where has all the Measure 110 funding gone?
Today, a picture of Stringer hangs on a wall in the Malheur County Health Department, outside the door to where his office used to be.
With just 29 staff, the agency is a small operation, located inside a modest one-story office building on the southwest side of Ontario. A rainbow-colored mural spreads across the wall where guests check in at a reception window.
Sarah Poe leads the department. A person in recovery herself, you can hear her passion for her peer support team and their clients as she talks about the high hopes she had for the improvements Measure 110 money could bring to her county — and how those hopes quickly faded.
Measure 110 was sold to voters on the promise of expanding access to drug treatment in a state that ranks highest for its rate of illicit drug use and dead last for its access to treatment, according to federal data.
Following the measure’s passage, however, its proponents have said Measure 110 spending should not focus on residential treatment, arguing that it can be paid for by the Medicaid-funded Oregon Health Plan.
This change has come as a blow to providers who thought much of the measure’s $300 million would go to expanding treatment infrastructure, then watched as the council that oversees Measure 110 spending rejected applications for stabilization centers, residential treatment and detox facilities.
Even with recent increases in reimbursements, Medicaid doesn’t come close to covering the full cost of treatment. That’s why Heather Jefferis, executive director of the Oregon Council For Behavioral Health, calls addiction care in Oregon “the most extreme example of how historic underfunding creates tragic outcomes.”
Providers also need money to purchase or erect the buildings that will house needed services, to begin with. The Legislature’s recent investments in behavioral health care have largely gone to mental health, not addiction treatment. And, there’s no plan for investing in the level of detox beds, residential treatment or housing for people in outpatient treatment that would be required to meet demand.
The frustration is evident statewide and especially in Malheur County.
“We got all this money that came into our community and you know what it gave us? More peers, more syringe exchanges, more Narcan,” Poe said, referring to an opioid overdose-reversing drug. These services are critical, she said but on their own, “they’re not a full solution. And we really, really, really needed a detox facility.”
Origins Faith Community is the only place in Ontario, Ore., where people living in poverty can get a free meal. On Oct. 13, 2022, homemade meatloaf and stuffing were on the menu.
Emily Green/The Lund Report
Poe wondered aloud why the state isn’t taking steps to ensure each region has the basic building blocks of a functioning treatment system in place: a detox center for withdrawal management, an overdose prevention coordinator, sufficient residential treatment, recovery housing and other baseline necessities.
In Malheur County, Poe said she’s watching as health department peers hand out more and more Narcan so that people using heroin and opioids can reverse potentially-fatal overdoses.
“Narcan is just there to keep someone alive to then get them into the treatment that they need,” Poe said. “But then we need to have the treatment piece there.”
Lack of support, resources for peer mentors
Janie Gullickson fought through methamphetamine addiction before becoming the director of the state’s most prominent peer-run organization, the Mental Health & Addiction Association of Oregon. Her enthusiasm is infectious when she speaks about the strength and resiliency of the peers she represents. As one of Measure 110′s chief petitioners, she believes in the law and its role in “expanding addiction recovery services across the continuum.”
Working out of her nonprofit’s headquarters in Northeast Portland, Gullickson oversees training, supervision and support for peers around Oregon — including in state-supported programs like Stringer’s in Malheur County.
Gullickson told The Lund Report that the recovery community in Oregon has seen an increase in relapses and overdoses during the pandemic, including among peers like Stringer.
In the wake of Stringer’s death, the health authority began requiring more structure to supervisory support for peers in state-funded peer programs, though a state spokesperson denied any connection between the two.
And for county-based peer programs that wanted outside help, the state also provided supervision and support by contracting with Gullickson’s organization.
“Some had great, experienced peer supervisors and were already doing peer programs. But it was those ones that felt very isolated and didn’t have that infrastructure that we focused on,” Gullickson said. They also worked with Malheur County, where the peer supervisor had been Stringer and his replacement was a member of his team, she said.
According to a statewide assessment, Gullickson’s nonprofit helped conduct in 2020, fewer than half of peers reported receiving supervision once a week or more. Some participants attributed high turnover to a lack of support, trauma and burnout.
But Gullickson said it’s important not to “other” peers by suggesting they need more supervision than other workers and suggested stigma may play a larger role than supervision in relapse.
(Left to right) Tyler Woods, Tiffanie Stabler and Steven Wolf talk in the alley behind Origins Faith Community. They work for Malheur County and hand out naloxone, hygiene kits and other supplies during the day shelter’s free meals.
Kyle Green for The Lund Report
“What we’ve seen sometimes is people won’t say, ‘Hey, I need help right now’ in the way that we would think people in recovery would be able to do. But when they get in this profession, often then it’s like, ‘Oh, I’ve got to prove myself.’”
Before 2020, the state required that peers have at least two years of recovery behind them before taking the 40- or 80-hour certification courses. To meet the demand for peers and behavioral health counselors, authorities lowered the requirement to one year.
Adding to the stress of their job, many peers also say that the residential programs currently used in Oregon need to offer longer stays and different approaches to increase their effectiveness.
Kevin Fitts, a peer and director of the Oregon Mental Health Consumers Association, told a crowd during the recent opening of Multnomah County’s Behavioral Health Resource Center that while the focus now is addressing the extreme shortages in behavioral health, the question that’s being neglected is whether the current model for treatment is succeeding.
“Are we having beneficial outcomes for the consumer of the services? Got me!” Fitts said. “We have a system in crisis. … What is important is getting the services that these people need out on the street. Well, are these services meeting the needs? Are people moving forward?”
Measure 110 delivers fraction of hoped for funds
On a Thursday morning in September, the smell of homemade meatloaf filled the air inside a mid-century brick church on the northwest side of Ontario.
Steven Wolf greeted patrons as they walked up to the back door. Wolf is a peer mentor, a job that Stringer recruited him into. The two graduated from drug court together before becoming peers.
Like most mornings, Anthony Caliendo, 52, was the first to show up. He’s experienced homelessness since July. He told The Lund Report he’s not interested in drug treatment. But Wolf said he helped Caliendo rely more on cannabis and less on meth — a harm reduction method employed by some peers.
Caliendo said Wolf is easy to talk to because he comes from a similar background. “He’s been hungry and spent his money on dope instead of food,” he said.
Anthony Caliend, 52, is experiencing homelessness in Ontario, Ore. He’s seen here sitting in the chapel at Origins Faith Community, where he receives free meals and peer services, on Oct. 13, 2022.
Kyle Green for The Lund Report
With no local year-round homeless shelter in the area, the church is the only place in Ontario where people can get a free meal. No longer operating as a house of worship, the building serves as a drop-in center run by a small nonprofit called Origins Faith Community, which is not religiously affiliated.
Staff at Origins saw Measure 110 as the opportunity they had been waiting for. They launched a peer program with Measure 110 funds and hired Wolf as its first peer.
But as the state program unfolded, it became clear that the robust local system Origins and other local providers had planned was not going to be possible.
Origins originally asked the Measure 110 council for $3.1 million. But the state wouldn’t fund the requested transportation services, the new drop-in center and the purchase of a 20-unit apartment building adjacent to the church.
Altruistic Recovery, an outpatient behavioral health clinic across town, requested $13 million to create a detox and residential treatment facility but was also denied.
Of the $265 million in funds distributed through Measure 110 this year, $1.8 million went to Malheur County.
That money, locals lament, will fund only seven beds — slated for an apartment complex that a local nonprofit plans to purchase as housing for people living with co-occurring HIV and substance use disorder.
Origins, meanwhile, got $616,000 — less than 20{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of what it hoped for.
Counselor Dana Rush, who left Origins following cuts made in November, said she thought that Measure 110 was going to be different.
“That’s why we were so excited about it — that finally, we could really meet people where they were,” she said, her voice breaking as tears filled her eyes. “And then to watch all of the stuff unfold and go, ‘Oh my gosh, we’re not going to be able to do that. OK, give us just what you can so we can just get started. And maybe we can build what we can. And we’ll do what we can. And we’ll keep doing what we can until — dang it — we’re just gonna keep doing what we can do.’”
The Lund Report produced this story with support from the Association of Health Care Journalists and The Commonwealth Fund. Emily Green can be reached at emily@thelundreport.org.
Sam Quinones, one of the nation’s foremost chroniclers of American drug abuse, took a stroll around San Francisco’s Tenderloin last week to take a hard look at the beleaguered neighborhood’s street addict scene. Like anyone else who’s taken that stroll lately, he saw the brazen fentanyl and methamphetamine use — and the grim consequences of unchecked addiction — that’s become a dispiriting calling card for that part of town.
Nothing much surprised him.
As a journalist and author covering America’s drug and homelessness epidemics for years, Quinones said what he witnessed has become alarmingly familiar across the country — and the crisis in the Tenderloin is not the uniquely San Francisco horror that locals and outside observers think it is.
“It’s not unlike several parts of the country I’ve seen,” Quinones said dryly, standing in UN Plaza while dealers hawked dope 20 feet away and a young woman squatted under an umbrella to smoke fentanyl through a straw.
“This story is the same all over the nation, because the drugs have covered the nation. It’s everywhere, and the massive supply that’s available now is the reason.”
Quinones, a former Los Angeles Times reporter and author of 2015’s best-selling “Dreamland” about the opioid epidemic, has been following the international drug trade for decades. His latest book, 2021’s “The Least of Us,” documents how synthesized fentanyl and pure meth, easily made with cheap chemicals in Mexico, have been pouring into the U.S., dominating the drug market and torquing drug addiction to new and dangerous levels.
That explosion, he said, is also helping drive a spike in homelessness around the country — because not only is fentanyl many times more powerful than heroin, but the newly more potent meth also causes extreme psychosis and instability. Both trap people in a cycle of addiction and hopelessness that makes it difficult to get off the street.
Quinones worked decades ago as a journalist in the Tenderloin, and was familiar with the city, but what he saw this week in the Tenderloin and other areas of San Francisco mirrored what he’s seen in Kentucky, Los Angeles, Reno, Portland, Ore., and Denver.
Thumper, 26, a homeless drug user, chats with author Sam Quinones at Civic Center Plaza in San Francisco.
Gabrielle Lurie / The Chronicle
He was taken aback at the “fearless” nature of some of the drug dealers who flipped him off and threw bottles at him while he was filming them with his phone — “They were laughing and behaving like they owned the block,” he said. But the rampantly open use of dope? Same story, different city.
“This has gone beyond what any city or county can deal with,” said the 64-year-old writer, who lives in Nashville. “It’s a national poisoning. We need to understand that this is supply-driven. It’s just way too available in massive quantities. And just like with homelessness, there is no one fix.”
Known overdose deaths in San Francisco have more than doubled since 2017, to 625 in 2021, and those overwhelmingly involved fentanyl either alone or mixed into another drug, with meth close behind.
Most of the nearly 8,000 people unhoused on any given night in San Francisco don’t struggle with substance abuse — but you don’t see them, generally. The ones visibly struggling in tents or shooting up on the sidewalk are the nearly 3,000 chronically homeless folks, so called because they have been outside for at least a year and suffer from disabilities that predominantly involve drugs, alcohol or mental illness.
It’s that population that Quinones was visiting this week, researching with no particular project in mind yet. As usual, it only took minutes to find street people in crisis to talk to, particularly in the gritty Tenderloin.
“I’m stuck out here because of fentanyl, and I don’t know how to get off it,” admitted a 26-year-old woman who gave her name as Thumper and sported a tattoo reading “Booze” over her right eye. Quinones helped her up when her dog, Bubba, accidentally knocked her down in UN Plaza as he lunged toward a bird. After a quick chit-chat she spilled out a harrowing biography.
“My dad killed himself and my mom shot me up with meth when I was a kid. I’ve been homeless since I was 14. I don’t do meth any more, but let me tell you — it’s gotten so much worse now. I think you’ve got to do it more often, and it makes you crazy faster,” she said.
Quinones noted how fentanyl is more difficult to detox from than heroin, with methadone being one of the few medications that consistently helps, and Thumper vigorously shook her head. “I tried Subutex (buprenorphine) to detox and it was awful, and I couldn’t get on methodone so I tried to detox in an alley and it was hell,” she said.
“I’m so sorry to hear that,” Quinones said. “The more I hear about this, the more I think there’s just this big mix of trauma and drugs.” Thumper again nodded.
One of Quinones’ biggest contentions is that a combination of personal trauma, drug addiction and mental illness commonly ensnare the most troubled unhoused people in the street, and addressing all of those problems with a broad range of approaches is the only way to make progress.
That means providing a wider variety of counseling-enriched supportive housing that tapers people off drugs and gets them away from drug-rich environments, increasing police crackdowns on drug dealing, providing intensive drug recovery programs in jail and more — ideas that are continually debated in San Francisco and other parts of the nation.
“The way to get people away from drugs is to keep people away from drugs during that very important few months when the drugs are telling them ‘you must go find me,’” Quinones said.
“Drugs hijack the brain’s instinct for self preservation. We always saw that, but these new drugs do that more completely because of their prevalence and potency. You see that every day in San Francisco, and all over the country — people who have completely lost their impulse for self preservation.”
Meanwhile, drugs are more available than ever, he said. Fentanyl may get the most publicity these days, but super-pure meth has also spiked because of the drop in price.
In 2008, meth cost about $20,000 a pound in Fresno, but today it costs between $500 and $800. Mix that with fentanyl and it’s a lot cheaper and easier to get high — most hits of meth and fentanyl cost between $1 and $5, cheaper drug highs than available 10 or 20 years ago.
But the twist is that the fairly new synthetic fentanyl — which is supplanting organic heroin as the main street opioid — has to be smoked a half-dozen times a day, at least, to stave off dope-sickness. Heroin gets the job done with two injections a day.
Thumper, 26, a homeless drug user, holds her dog, Bubba, on a leash while she chats with author Sam Quinones at Civic Center Plaza in San Francisco.
Gabrielle Lurie / The Chronicle
“Every time Thumper smokes fentanyl she’s playing Russian roulette, six to eight times a day, and the high isn’t even as good,” Quinones said. “No heroin addict ever wanted to be a fentanyl addict. But you hardly see heroin out here any more compared to fentanyl. Synthetics have just taken over.”
Figures from the U.S. Department of Housing and Urban Development show that unsheltered homelessness increased nationally 3.4{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} between 2020 and 2022, despite billions of extra dollars spent on the problem through COVID relief. Most communities in California also saw spikes, and homelessness overall throughout the state shot up 13{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} since 2019.
San Francisco was an outlier on the increases, reducing unsheltered homelessness by 15{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} since 2019. But that’s due to new investments of hundreds of millions of dollars in shelters and housing — and city officials estimate that for every one homeless person who gets housed, four more take their place.
The city’s Department of Homelessness and Supportive Housing released a study in December contending that ending unsheltered homelessness within three years would require spending an additional $1.4 billion on top of what is already budgeted. But even in that report, HSH admitted the goal is probably impossible for a lot of reasons — including that four-for-every-one estimate.
Quinones sees figures like that and blames, in large part, drugs. And in that, he sees death.
“Left on the street, people will die,” he said. “Meth will drive them mad and fentanyl will kill them. It’s not like heroin or crack. You used to be able to survive for decades on it. Not with fentanyl.”
Kevin Fagan is a San Francisco Chronicle staff writer. Email: kfagan@sfchronicle.com Twitter: @KevinChron
An Air Drive registered nurse data affected person information in Brockton, Mass., on Feb. 17, 2022. (Army)
Ransomware assaults on health care shipping and delivery corporations doubled concerning 2016 and 2021, from 43 described attacks to 91. Even so, it is possible these numbers and impacts are underestimated owing to limited information brought on by underreporting, according to a new research published in JAMA Well being Discussion board.
One out of 5 ransomware assaults were being not detailed in the Office of Wellness and Human Services Business for Civil Rights databases.
When these gaps might have been triggered by a reduced amount of money of compromised safeguarded health and fitness information, the scientists pointed out that it could possibly also be because of to “confusion about irrespective of whether ransomware assaults should be reported via formal channels when they contain encryption, but not precise removing, of facts from personal computer units.”
HHS earlier tried to crystal clear up this confusion as far back again as 2016, just after ransomware actors started focusing on the health care sector in drive and observed a lot of entities weren’t notifying the regulatory system.
At that time, they pressured that it was companies who bore the onus for proving facts wasn’t accessed by the attackers or they should report the incident to HHS. Specified the issues in obtaining that evidence, HHS warned that ransomware incidents should really be presumed a data breach.
But present-day reporting needs “lack either an enforcement system or a penalty for noncompliance,” the researchers wrote. “Even when an entity reviews an attack, there is no sanction for accomplishing so outside of the legislated 60-working day window, which might reveal the significant proportion of ransomware assaults with delayed reporting.”
These reporting gaps are contributing to the lack of knowledge on ransomware impacts on equally care supply and details exposure. The scientists recommend that alternatively, legislators ought to “shape an knowledgeable and effectively-specific policy response” to improve info assortment all-around cyberattacks.
Ransomware’s influence on health care supply
Throughout all sectors in the last calendar year, stability scientists struggled to gauge no matter if ransomware assaults have been on the increase or stagnating. What’s distinct is that attackers are acquiring smarter and the price tag to get well from these assaults is dramatically expanding across all sectors — impacting cyber insurance coverage in the method.
In healthcare, the impacts of ransomware are quickly witnessed in each individual clinic assault that have verified the individual basic safety threats posed by these prolonged intervals of community downtime. At the very least a few world wide wellbeing systems are presently in downtime after ransomware incidents, which has led to treatment diversion, appointment cancellations and delays.
But as famous in JAMA, there’s merely not adequate info to thoroughly comprehend the trivialities of healthcare facility location impacts following ransomware. When the researchers observed the study’s boundaries, the information does glow a light-weight on incident response and care disruptions.
The researchers analyzed a complete of 374 ransomware incidents described amongst 2016 and 2021, with documented proof of treatment delivery disruptions for 166 of the 374 analyzed assaults.
Though the facts did not show a statistically sizeable raise in general operational disruptions, at the very least 32 of the incidents have been tied to disruptions that exceeded about two weeks, 41.7{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of which integrated electronic system downtime. Delays or scheduled treatment cancellations had been observed in 10.2{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of the recorded incidents and 4.3{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} observed ambulance diversion procedures.
There was also an increase in the share of assaults that concerned ambulance diversions. Though disruptions assorted by the sort of business, hospitals had been the most very likely to practical experience a disruption through a ransomware assault.
Even more, all ransomware incidents have an organizational impact on technique safeguards and the reaction of leadership. The scientists had been capable to document “disruptions to care shipping throughout just about 50 {35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of all ransomware attacks, but the scope of the dilemma is possible larger.”
“The most recurrent disruption was to electronic devices, which routinely compelled a swap to paper charting,” in accordance to the report. “These operational disruptions might harm people, specially people suffering from emergencies and for whom timely remedy is important.”
Further investigation is wanted to “quantify an empirical affiliation in between ransomware assaults and individual results.”
The facts indicates that ransomware assaults on health care “organizations have enhanced in sophistication as effectively as in frequency,” scientists wrote. The “findings stand for the only census of ransomware assaults on healthcare shipping organizations.”
Even so, these estimates “of magnitude align with results in the grey literature, and the development around time is dependable with reports that ransomware actors increasingly qualified health care supply companies throughout the COVID-19 pandemic,” they additional.
In conditions of health care concentrating on, clinics of all specialties were the most typical healthcare entity to encounter a ransomware attack, adopted by hospitals, other supply corporation internet sites, ambulatory surgical facilities, behavioral wellbeing businesses, dental offices, and post–acute care businesses.
About 53{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of all ransomware attacks influenced a number of amenities inside of the attacked organization. Prime examples of multi-site outages brought on by ransomware include Universal Health Expert services, Scripps Well being, CommonSpirit Well being, and University of Vermont Health Community.
The ransomware impact on affected individual details
The knowledge of practically 42 million sufferers was compromised by the 374 analyzed ransomware attacks, a much more than 11-fold increase from 2016 to 2021.
These impacts held correct by means of 2022, where each of the 15 largest healthcare details breaches influencing more than 1 million individuals every single, although not all ended up brought about by ransomware.
The report confirmed the evolution of ransomware attacks for the duration of the review period of time. Each individual 12 months, ransomware grew to become additional very likely to expose the details of better numbers of clients, regardless of business form.
What is much more, vendors have been more probably to report the assaults and data impacts late to HHS. The quantity of assaults reported far more than twice the mandated 60-day “increased significantly in 2020 and 2021.” HHS reminded suppliers of the timely reporting need late very last calendar year.
Of the 290 incidents noted to HHS, 54.3{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} had been documented outdoors of the 60-day reporting window.
Whilst about 1 in 5 healthcare corporations ended up reportedly able to restore facts from backups after a ransomware assault, “the likelihood of healthcare companies restoring ransomware-encrypted or stolen facts from backups decreased” from 2016 to 2021.
Also, the scientists discovered evidence that the ransomware actors designed some or all of the stolen safeguarded wellness details public in 59 of the attacks by putting up it on darkish world-wide-web community forums. As the a long time have progressed, it’s develop into progressively most likely for all or some stolen details to be publicly leaked.
Although confined, the scientists were being in a position to verify the improve in frequency and sophistication of ransomware attacks towards the healthcare sector from 2016 to 2021. Knowledge confirms the regular disruptions and publicity of PHI, but extra investigate is wanted to “more precisely recognize the operational and clinical care implications of these disruptions.”
As lawmakers seek out to deal with the danger of ransomware throughout all sectors, the scientists urged “them to concentrate on the distinct demands of health care shipping and delivery organizations, for which operational disruptions may have considerable implications for the excellent and protection of individual treatment.”
CHIPPEWA VALLEY (WQOW) – A Cadott male is sharing his tale about ditching his addictions and living a life of sobriety.
“Everything was just coming and crashing down on me. And I recognized that utilizing was not the solution,” said George Hite of Cadott.
Hite functions as a quality supervisor for Alloy Steel Finishing in Eau Claire.
But in 2010 while at a different job, he became addicted to opiates.
“I begun finding migraines a good deal and a good friend of mine just claimed, ‘Hey, you know, I acquired some morphine here.'”
He then starting up making use of pharmaceutical fentanyl.
On the exterior, he appeared like a normal performing human being. He experienced a fantastic work. He purchased a property. He experienced a loving wife and two kids.
“Operate was high-quality. I was doing the job more several hours. Expenses have been compensated,” Hite explained. “It really is at the time I shed my task and when the bills begun piling up, that is when the marriage with my oldest son started off to deteriorate a small little bit. And I understood some thing experienced to be done.”
It would be five several years until finally Hite would get the help he required.
In 2015, he observed an AODA (Alcoholic beverages and Other Drug Abuse) counselor at Mayo Clinic Health Program who advised he go to an dependancy treatment program at the Hazelden Betty Ford Foundation in Minnesota.
“Went there, did their 28-working day system, which is amazing. Accomplished that and from there, it was excellent.”
It was fantastic, but he quickly changed his drug dependancy with a food a person.
In 3 many years, Hite attained 100 lbs.
“For me, it felt like I was pretty much utilizing my medication once more. It was a ease and comfort factor,” Hite recalled. “I stopped hanging out with family, stopped hanging out with mates. Items that I used to do, and all those were being the similar factors that I did at the peak of my dependancy to opiates.”
To obtain regulate of his lifestyle and human body once again, he enrolled in Mayo’s bariatric surgical procedure plan.
“He was a wonderful candidate due to the fact he is remarkably determined and he was keen to go through the entire software,” stated Dr. Maria Linnaus, Mayo Clinic Health Technique assistant professor of surgical treatment and Hite’s bariatric surgeon.
Dr. Linnaus stated a large amount of sufferers in their system have a heritage of prior substance abuse.
“That fee is up to 20 to 30{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} actually. By the time they typically appear to our bariatric application, that rate is much decrease that they have an lively dependancy, but it is a rather common point to see,” she mentioned.
165 kilos now and clear from equally his addictions, the 45-yr-outdated reported he is doing much much better.
“Oh, it’s magnificent. I am again with my spouse and children. I am back with my buddies. I am finding out far more. My wife and I are going on much more holidays. My romance with my two sons is much better than at any time.”
For people battling with material abuse, Hite explained the very best point you can do is explain to someone.
Your liked types can’t help you if they never know you have a dilemma.
WEDNESDAY, Jan. 4, 2023 (HealthDay News) — Ransomware assaults on America’s health and fitness care devices have far more than doubled in current yrs, disrupting required healthcare treatment and exposing the particular facts of millions, a new examine experiences.
These assaults — in which laptop programs are locked down by hackers right until the victim agrees to pay out a ransom — strike all ranges of wellness care, from your doctor’s or dentist’s office up to the largest hospitals and surgical centers, according to the new conclusions.
The annual quantity of ransomware attacks against health and fitness treatment leapt to 91 documented conditions in 2021 from 43 in 2016, the researchers uncovered.
These attacks exposed the particular health data of practically 42 million patients, induced ambulances to be diverted in crucial scenarios, and compelled delays or cancellations of scheduled treatment.
“It does seem to be like ransomware actors have acknowledged that well being treatment is a sector that has a lot of cash and they are eager to pay back up to try to resume well being care supply, so it seems to be an region that they’re targeting a lot more and much more,” stated lead researcher Hannah Neprash, an assistant professor of wellbeing policy and management at the University of Minnesota Faculty of Public Wellness.
For this research, Neprash and her colleagues established a database that tracks wellness care ransomware occasions. The database combines facts from federal regulators and a personal cybersecurity menace intelligence company.
“We located that alongside a quantity of proportions, ransomware assaults are obtaining extra significant,” Neprash stated. “It’s not a fantastic information tale. This is a terrifying detail for health care companies and people.”
About 44{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of the assaults disrupted care shipping, sometimes by a lot more than a thirty day period, the results confirmed.
These disruptions can be as minimal as rescheduling a verify-up or a new dental crown, or they can have much more dire penalties.
In 2019, a toddler died all through a ransomware assault at Springhill Medical Heart in Cell, Ala.
On the eighth day of the cyberattack, the baby was born with her umbilical twine wrapped all around her neck, resulting in severe mind injury. She died 9 months later.
Mainly because the hospital’s pc systems were down, nurses failed to recognize a alter in fetal heart price that would have led medical professionals to purchase an rapid cesarean section, the baby’s mom argued in a lawsuit.
That procedure could have saved the baby’s everyday living, the lawsuit statements, despite the fact that the healthcare facility denies any wrongdoing and had concluded it was protected to continue on operating all through the ransomware assault.
About one out of 4 wellness treatment shipping companies say that ransomware assaults are liable for an increase in deaths, in accordance to a September 2021 report executed by the Ponemon Institute, an details know-how investigation group.
These wellbeing care functions also claimed that delays in procedures and checks consequence in weak outcomes (70{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}), increase the quantity of people transferred or diverted to other facilities (65{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}), and result in boosts in troubles (36{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}), according to the Ponemon report.
“You can envision that if we’re talking about a medical center and some of that care shipping and delivery is crisis care for people who actually require timely wellbeing care, a ransomware assault seriously interrupts a hospital’s capability to provide that timely treatment,” Neprash said.
Neprash’s database revealed that clinics ended up focused in 58{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc} of assaults, adopted by hospitals (22{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}), outpatient surgical centers (15{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}), psychological wellness amenities (14{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}) and dental offices (12{35112b74ca1a6bc4decb6697edde3f9edcc1b44915f2ccb9995df8df6b4364bc}).
Individuals are now far more likely to have their individual information stolen from a overall health treatment personal computer procedure than they have been just a couple of years in the past, the examine authors pointed out.
“A very simple way of measuring an attack is how lots of individuals had their personal wellbeing details exposed in an attack, and that quantity has just gone as a result of the roof,” Neprash reported. “The common assault uncovered maybe 37,000 in-patient documents in 2016. And by 2021, you are up to about 230,000 per attack.”
The hackers can then market or launch that information to other undesirable actors. “Potentially, that includes delicate info about patients’ diagnoses or the care they received or even money facts,” Neprash explained.
Ransomware assaults are also more probable to impact significant corporations with numerous amenities, and victims are a lot less possible to be ready to restore functions from facts backups, the investigators found.
An October ransomware attack on CommonSpirit Wellbeing, the fourth-most significant U.S. health procedure with more than 140 hospitals, led to delays in surgeries, individual treatment and appointments from Seattle to Tennessee.
Unfortunately, Neprash’s findings possible underrepresent the real scale of the danger, reported Lee Kim, senior principal of cybersecurity and privacy with the Healthcare Details and Administration Devices Culture, in Chicago.
“Ransomware functions are really probable to be underreported,” Kim explained. “Even the total paid out for ransom, for example, could be underreported as effectively. So, I definitely assume that there is certainly a larger sized issue than we assume.”
Hackers also have grown extra subtle, and a health and fitness care facility’s method may possibly be compromised for months prior to the precise ransomware assault occurs, Kim additional.
New regulations, crackdowns required
“It often isn’t a smash-and-grab. It is far more like a multistage sort of occasion where by a small-amount style of malware receives the attackers into the system, where they perhaps steal some qualifications and notice and implant them selves for a relatively sizeable dwell time,” Kim reported.
“And then when they have in essence acquired what they want to receive, then they are going to pull the trigger, so to talk,” Kim continued. “They’ll deploy the ransomware, but it really is normally only immediately after a considerable sum of dwell time.”
Health care has tended to lag other sectors of the American economic climate when it comes to facts engineering, and that extends to cybersecurity, Neprash and Kim said.
New rules and regulations may be wanted to prod wellness treatment into better guarding its computer system programs, Neprash claimed — which includes achievable subsidies for scaled-down hospitals that may well not be equipped to pay for this kind of investments.
Legislation enforcement can also phase up efforts to crack down on destructive hackers, Kim stated.
“It’s a tough career,” Kim claimed. “There’s been good work carried out in phrases of using down these ransomware gangs, but we unquestionably need to do far more.”
Pc stability can definitely be enhanced, but health and fitness treatment staff also need to have much more training to protect against these attacks, Kim stated.
For case in point, health care IT staffers can be skilled to search for the telltale indications that somebody has invaded the process and is rummaging all over, planning an attack, Kim claimed.
Additional, any individual with laptop obtain really should be taught the essentials of staying away from easy scams and phishing attacks that could support a hacker get into the procedure, Kim added.
“We need to not shed sight of the concealed enemy inside of our organizations, which is the insider risk,” Kim said. “It could be a perfectly-this means employee that unintentionally clicks on a phishing connection place of work attachment, or extra rarely could be a malicious insider that wishes to do hurt.”
Hospitals and surgical facilities can get ready for ransomware attacks by organizing how to greatest go on affected individual treatment for the duration of a disruption in laptop or computer support, Kim continued.
“Health care companies need to assume about and drill on — that is apply — these back-up processes and units, the previous-university strategies of obtaining out data and speaking with just about every other,” Kim reported. “Unfortunately, that cyberevent will come about at a single place or an additional and it will be chaos except if there is a strategy.”
Resources: Hannah Neprash, PhD, assistant professor, health plan and management, College of Minnesota College of General public Health and fitness, Minneapolis Lee Kim, JD, senior principal, cybersecurity and privateness, Healthcare Information and Management Devices Society, Chicago JAMA Wellbeing Forum, Dec. 29, 2022, on-line
