Clinical laboratories and anatomic pathology groups should consider these cyberattacks on major healthcare entities as reminders that they should tighten their cybersecurity protections
Hackers continue to gain access to public health records—including clinical laboratory testing data—putting thousands of patients’ protected health information (PHI) at risk of being exposed. The latest important healthcare entity to become the victim of a ransomware attack is American Associated Pharmacies (AAP). According to The Register, AAP announced a ransomware operation called Embargo had stolen over 1.4 terabytes (TB) of data, encrypted those files, and demanded $1.3 million to decrypt the data.
Embargo claims that Scottsboro, Ala.-based AAP paid $1.3 million to have its systems restored. They are now demanding an additional $1.3 million to keep the stolen data private, the HIPAA Journal reported, adding, “The attack follows ransomware attacks on Memorial Hospital and Manor, an 80-bed community hospital and 107 long-term care facility in Georgia, and Weiser Memorial Hospital, a critical access hospital in Idaho.”
AAP has not publicly confirmed the ransomware attack, nor has it made an official statement regarding the breach. But it did post an “Important Notice” on its website reporting, “limited ordering capabilities for API Warehouse have been restored at APIRx.com.”
API Warehouse is a subsidiary of AAP that helps subscribers save on brand name and generic prescriptions via wholesale purchasing plans. It oversees more than 2,000 independent pharmacies across the US and has over 2,500 stock keeping units (SKUs) in its inventory.
The message further states “All user passwords associated with both APIRx.com and RxAAP.com have been reset, so existing credentials will no longer be valid to access the sites. Please click ‘forgot password’ on the log in screen and follow the prompts accordingly to reset your password.”
“Embargo seems to have international and multi-sector victims and is not focusing on a specific victim profile. They seem opportunistic,” Mike Hamilton (above), founder and chief information security officer (CISO) of cybersecurity firm Critical Insight, told HealthcareInfoSecurity. “However, as they do have multiple victims in healthcare, and their tooling to disable detection is sophisticated, they should not be discounted. If indeed they operate through affiliates, we can expect others to use their infrastructure and tools, and Embargo may emerge as a top threat to healthcare.” Since 80% of all medical records are made up of clinical laboratory testing data, laboratory patients are particularly vulnerable. (Photo copyright: Critical Insight.)
Embargo on the Hunt for PHI
Due to the large amount of data Embargo stole from the AAP servers, it’s likely the hackers were able to procure medical records and account details from all customers of the pharmacies involved in the attack.
Researchers at ESET, an internet security company, first noticed the ransomware organization known as Embargo in June of this year. In a news release, ESET stated that Embargo used an endpoint detection and response (EDR) killer toolkit to steal AAP’s data.
“Based on its modus operandi, Embargo seems to be a well-resourced group. It sets up its own infrastructure to communicate with victims. Moreover, the group pressures victims into paying by using double extortion: the operators exfiltrate victims’ sensitive data and threaten to publish it on a leak site, in addition to encrypting it,” ESET wrote in a news release.
Embargo recently attacked other organizations within the healthcare industry as well. In November, it claimed responsibility for breaching the security of Memorial Hospital and Manor in Bainbridge, Ga. The cyberattack affected Memorial’s email and electronic medical record (EHR) systems, which caused the facility to pivot to a paper-based system, The Cyber Express reported.
Embargo’s attack on Weiser Memorial Hospital in Weiser, Idaho, involved the theft of approximately 200 gigabytes (GB) of sensitive data and caused a four-week-long outage of its computer systems.
Other Cyberattacks on Healthcare Organizations
Dark Daily has covered many cyberattacks on hospital health systems in multiple ebriefs over the past few years.
Safeguarding patient data is critical, and more healthcare organizations are discovering the hard way that they are vulnerable to hackers. This situation serves as another reminder to clinical laboratory and pathology group managers that they need to be proactive and serious about protecting their information systems, and in upgrading their digital security at regular intervals.
Hackers are working hard to obtain access to protected health information, which puts patients at continuous risk of having their private records stolen.
These advances in the battle against cancer could lead to new clinical laboratory screening tests and other diagnostics for early detection of the disease
As Dark Daily reported in part one of this story, the World Economic Forum (WEF) has identified 12 new breakthroughs in the fight against cancer that will be of interest to pathologists and clinical laboratory managers.
As we noted in part one, the WEF originally announced these breakthroughs in an article first published in May 2022 and then updated in October 2024. According to the WEF, the World Health Organization (WHO) identified cancer as a “leading cause of death globally” that “kills around 10 million people a year.”
The WEF is a non-profit organization base in Switzerland that, according to its website, “engages political, business, academic, civil society and other leaders of society to shape global, regional and industry agendas.”
Monday’s ebrief focused on four advances identified by WEF that should be of particular interest to clinical laboratory leaders. Here are the others.
Personalized Cancer Vaccines in England
The National Health Service (NHS) in England, in collaboration with the German pharmaceutical company BioNTech, has launched a program to facilitate development of personalized cancer vaccines. The NHS Cancer Vaccine Launch Pad will seek to match cancer patients with clinical trials for the vaccines. The Launch Pad will be based on messenger ribonucleic acid (mRNA) technology, which is the same technology used in many COVID-19 vaccines.
The BBC reported that these cancer vaccines are treatments, not a form of prevention. BioNTech receives a sample of a patient’s tumor and then formulates a vaccine that exposes the cancer cells to the patient’s immune system. Each vaccine is tailored for the specific mutations in the patient’s tumor.
“I think this is a new era. The science behind this makes sense,” medical oncologist Victoria Kunene, MBChB, MRCP, MSc (above), trial principal investigator from Queen Elizabeth Hospital Birmingham (QEHB) involved in an NHS program to develop personalized cancer vaccines, told the BBC. “My hope is this will become the standard of care. It makes sense that we can have something that can help patients reduce their risk of cancer recurrence.” These clinical trials could lead to new clinical laboratory screening tests for cancer vaccines. (Photo copyright: Queen Elizabeth Hospital Birmingham.)
Seven-Minute Cancer Treatment Injection
NHS England has also begun treating eligible cancer patients with under-the-skin injections of atezolizumab, an immunotherapy marketed under the brand name Tecentriq, Reuters reported. The drug is usually delivered intravenously, a procedure that can take 30 to 60 minutes. Injecting the drug takes just seven minutes, Reuters noted, saving time for patients and cancer teams.
The drug is designed to stimulate the patient’s immune system to attack cancer cells, including breast, lung, liver, and bladder cancers.
AI Advances in India
One WEF component—the Center for the Fourth Industrial Revolution (C4IR)—aims to harness emerging technologies such as artificial intelligence (AI) and virtual reality. In India, the organization says the Center is seeking to accelerate use of AI-based risk profiling to “help screen for common cancers like breast cancer, leading to early diagnosis.”
Researchers are also exploring the use of AI to “analyze X-rays to identify cancers in places where imaging experts might not be available.”
Using AI to Assess Lung Cancer Risk
Early-stage lung cancer is “notoriously hard to detect,” WEF observed. To help meet this challenge, researchers at Massachusetts Institute of Technology (MIT) developed an AI model known as Sybil that analyzes low-dose computed tomography scans to predict a patient’s risk of getting the disease within the next six years. It does so without a radiologist’s intervention, according to a press release.
Using Genomics to Identify Cancer-Causing Mutations
In what has been described as the “largest study of whole genome sequencing data,” researchers at the University of Cambridge in the UK announced they have discovered a “treasure trove” of information about possible causes of cancer.
Using data from England’s 100,000 Genomes Project, the researchers analyzed the whole genome sequences of 12,000 NHS cancer patients.
This allowed them “to detect patterns in the DNA of cancer, known as ‘mutational signatures,’ that provide clues about whether a patient has had a past exposure to environmental causes of cancer such as smoking or UV light, or has internal, cellular malfunctions,” according to a press release.
The researchers also identified 58 new mutational signatures, “suggesting that there are additional causes of cancer that we don’t yet fully understand,” the press release states.
The study appeared in April 2022 in the journal Science.
Validation of CAR-T-Cell Therapy
CAR-T-cell therapy “involves removing and genetically altering immune cells, called T cells, from cancer patients,” WEF explained. “The altered cells then produce proteins called chimeric antigen receptors (CARs), which can recognize and destroy cancer cells.”
The therapy appeared to receive validation in 2022 when researchers at the University of Pennsylvania published an article in the journal Nature noting that two early recipients of the treatment were still in remission after 12 years.
However, the US Food and Drug Administration (FDA) announced in 2023 that it was investigating reports of T-cell malignancies, including lymphoma, in patients who had received the treatment.
WEF observed that “the jury is still out as to whether the therapy is to blame but, as a precaution, the drug packaging now carries a warning.”
Breast Cancer Drug Repurposed for Prevention
England’s NHS announced in 2023 that anastrozole, a breast cancer drug, will be available to post-menopausal women to help reduce their risk of developing the disease.
“Around 289,000 women at moderate or high risk of breast cancer could be eligible for the drug, and while not all will choose to take it, it is estimated that if 25% do, around 2,000 cases of breast cancer could potentially be prevented in England, while saving the NHS around £15 million in treatment costs,” the NHS stated.
The tablet, which is off patent, has been used for many years to treat breast cancer, the NHS added. Anastrozole blocks the body’s production of the enzyme aromatase, reducing levels of the hormone estrogen.
Big Advance in Treating Cervical Cancer
In October 2024, researchers announced results from a large clinical trial demonstrating that a new approach to treating cervical cancer—one that uses currently available therapies—can reduce the risk of death by 40% and the risk of relapsing by 36%.
“This is the biggest improvement in outcome in this disease in over 20 years,” said Mary McCormack, PhD, clinical oncologist at the University College London and lead investigator in the trial.
The scientists published their findings in The Lancet.
Pathologists and clinical lab managers will want to keep track of these 12 breakthrough advancements in the diagnosis and treatment of cancer highlighted by the WEF. They will likely lead to new screening tests for the disease and could save many lives.
With further study, this research may provide clinical laboratories with a new proteomic biomarker for dementia screenings that identifies risk more than 10 years before symptoms appear
Researchers at the University of Warwick in the UK and Fudan University in Shanghai, China, identified four protein biomarkers in blood that they say can predict dementia up to 15 years before diagnosis. They say these biomarkers may lead to clinical laboratory blood tests that offer alternatives to costly brain scans and lumbar punctures for diagnosis of dementia.
The scientists “used the largest cohort of blood proteomics and dementia to date,” according to a University of Warwick news release. This included taking blood from 52,645 “healthy” people without dementia who participated in the UK Biobank—a population-based study cohort, the new release noted.
“The proteomic biomarkers are [easy] to access and non-invasive, and they can substantially facilitate the application of large-scale population screening,” said neurovegetative disease specialist Jin-tai Yu, MD, PhD, a professor at Fudan University and co-author of the study, in the news release.
“The advent of proteomics offers an unprecedented opportunity to predict dementia onset,” the researchers wrote.
“This is a well-conducted study that adds to what we know about changes in blood that occur very early in diseases that cause dementia, which will be important for early diagnosis in the future,” said Tara Spires-Jones, PhD, in a post from the Science Media Center in the UK. “However,” she added, “it is important to note that these are still scientific research studies and that there are currently no blood tests available for routine use that can diagnose dementia with certainty.
“Based on this study, it does seem likely that blood tests will be developed that can predict risk for developing dementia over the next 10 years, although individuals at higher risk often have difficulty knowing how to respond,” Suzanne Schindler, MD, PhD (above), told Reuters. Schindler, an Associate Professor of Neurology at Washington University in St. Louis, was not involved in the research. Clinical laboratories may soon have a new blood test for dementia. (Photo copyright: VJDementia.)
Predicting Onset of Dementia with 90% Accuracy
The researchers analyzed 52,645 blood samples from the UK Biobank (UKBB). The samples were collected between 2006 and 2010 from healthy individuals who at that time were without dementia.
By March 2023, 1,417 of the study participants had developed Alzheimer’s disease or some other form of dementia. The researchers looked at 1,463 proteins and identified four that were present in high levels among those people:
“Individuals with higher GFAP levels were 2.32 times more likely to develop dementia,” the researchers wrote in Nature Aging. “Notably, GFAP and LTBP2 were highly specific for dementia prediction. GFAP and NEFL began to change at least 10 years before dementia diagnosis.”
When adding known risk factors such as age, sex, and genetics, the researchers said they could predict onset of dementia with 90% accuracy, according to the University of Warwick news release.
“Our findings strongly highlight GFAP as an optimal biomarker for dementia prediction, even more than 10 years before the diagnosis, with implications for screening people at high risk for dementia and for early intervention,” the researchers wrote.
The news release also noted that smaller studies had already identified some of the proteins as potential biomarkers, “but this new research was much larger and conducted over several years.”
Further Validation Needed
Amanda Heslegrave, PhD, of the UK Dementia Research Institute, University College London described the UKBB as “an excellent resource” in the Science Media Center (SMC) post. However, she noted, it’s “a highly curated biobank and may not capture all populations that we need to know the risk for. The new biomarkers identified will need further validation before being used as screening tools.”
Another expert raised additional questions about the University of Warwick/Fudan University study in the SMC post.
“These results may help researchers understand the biological systems involved in the development of dementia,” said David Curtis, MD, PhD, of the UCL Genetics Institute at University College London. “However in my view the strengths of the reported associations are not really strong enough to say that these would form a useful test for predicting who will get dementia in the future.”
Conversely, Curtis pointed to other studies suggesting that phosphorylated tau (p-tau) proteins are better candidates for developing a simple blood test.
P-tau “provides a very good indicator of whether the pathological processes leading to Alzheimer’s disease are present in the brain,” he said. “When effective treatments for Alzheimer’s disease are developed it will be very helpful indeed to have simple blood tests—such as measuring phosphorylated tau—available in order to identify who could benefit.”
At least two blood tests based on the p-tau217 variant—from ALZpath and C2N—are currently available to US clinicians as laboratory developed tests (LDT).
The UK Biobank continues to be used by researchers both in the UK and abroad because of the full sets of data on large numbers of patients over many years. There are few other sources of such data elsewhere in the world. The UK Biobank is a large-scale biomedical database and research resource. It contains de-identified genetic, lifestyle and health information, and biological samples from 500,000 UK participants.
On its website, the UK Biobank states, “It is the most comprehensive and widely-used dataset of its kind and is globally accessible to approved researchers who are undertaking health-related research that is in the public interest, whether they are from academic, commercial, government or charitable settings.”
Thus, clinical laboratory managers and pathologists can expect a continuing stream of published studies that identify biomarkers associated with different health conditions and to see where the data used in these analyses came from the UK’s biobank.
Millions of cancelled healthcare appointments and lengthy waits for care abound in UK, New Zealand, and in the US
Strikes continue on multiple continents as thousands of healthcare workers walk off the job. Doctors, medical laboratory scientists, nurses, phlebotomists and others around the world have taken to the picket lines complaining about low wages, inadequate staffing, and dangerous working conditions.
In England, junior doctors (the general equivalent of medical interns in the US) continue their uphill battle to have their complaints heard by the UK government. As a result, at hospitals and clinics throughout the United Kingdom, more than one million appointments have been cancelled due to strikes, according to the BBC.
“The true scale of the disruption is likely to be higher—many hospitals reduce bookings on strike days to minimize last-minute cancellations,” the BBC reported. “A total of one million hospital appointments have had to be rescheduled along with more than 60,000 community and mental health appointments since December [2022], when industrial action started in the National Health Service (NHS).”
According to The Standard, “Consultants in England are to be re-balloted over the prospect of further strike action as doctors and the government remain in talks with a view to end the dispute. The British Medical Association (BMA) said that specialist, associate specialist, and specialty (SAS) doctors will also be balloted over potential strike action.”
“We must be prepared to take the next step and ballot for industrial action if we absolutely have to—and we will do this … if upcoming negotiations fail to achieve anything for our profession,” Ujjwala Anand Mohite, DRCPath, FEBPath (above), a histopathologist at the NHS, Dudley Group of Hospitals, and the first female Chair of the SAS committee UK, told The Guardian.
New Zealand Doctors, Clinical Laboratory Workers Strike
In September, the first-ever nationwide senior doctor strike occurred in New Zealand and was then followed by another strike of about 5,000 doctors and 100 dentists from New Zealand’s public hospitals, the World Socialist Web Site reported.
Similar to the UK, the strikes reflect mounting frustration over pay not keeping up with inflation and “decades of deteriorating conditions in the public health system,” the WSWS noted.
This follows months of strikes by the island nation’s medical laboratory workers, which are ongoing.
“Our pay scales, if you compare them internationally, are not competitive. About half of our specialists come from abroad, so it’s quite important for the country’s health system to be able to attract and keep people,” Andy Davies, a lung specialist who joined the picket outside 484-bed Wellington Hospital, told the WSWS.
“We’re not asking for the world, we’re asking for an inflationary pay rise, and we haven’t had an inflationary pay rise year-on-year, and it’s beginning to show,” he added.
“What type of health system do they want?” he continued. “Do we want one that treats all people and manages what they need, or do we want a hacked down system that does less?”
The conflicts over pay and working conditions have caused many healthcare workers in New Zealand to leave the field entirely. This has led to severe shortages of qualified workers.
“Patient waiting times—for cancer, hip replacements, cardiac problems, and many other conditions—have exploded due to understaffed and overwhelmed hospitals,” the WSWS reported.
US Healthcare Workers also Striking
The US has its share of striking healthcare workers as well. Healthcare Dive tracked 23 ongoing or anticipated strikes throughout the nation’s healthcare industry since January 1, 2023. In 2022, there were 15 strikes of healthcare workers at the nation’s hospitals and health systems.
These walkouts include doctors, nurses, pharmacy workers, imaging specialists, and thousands of frontline healthcare workers striking over dangerously low staffing levels, unsafe working conditions, and low pay.
In October, 75,000 nurses, support staff, and medical technicians from Kaiser Permanente participated in a 72-hour strike comprised of hundreds of hospitals and clinics throughout California, Washington state, Oregon, Virginia, and the District of Columbia, Reuters reported.
The three-day strike, “Marked the largest work stoppage to date in the healthcare sector,” Reuters noted. Doctors, managers, and contingency workers were employed to keep hospitals and emergency departments functioning.
“The dispute is focused on workers’ demands for better pay and measures to ease chronic staff shortages and high turnover that union officials say has undermined patient care at Kaiser,” Reuters stated.
Staffing shortages following the COVID-19 pandemic are partly to blame for current struggles, but contract staffing to fill critical positions has exacerbated the problem.
“Kaiser’s outsourcing of healthcare duties to third-party vendors and subcontractors has also emerged as a major sticking point in talks that have dragged on for six months. … The clash has put Kaiser Permanente at the forefront of growing labor unrest in the healthcare industry—and across the US economy—driven by the erosion of workers’ earning power from inflation and pandemic-related disruptions in the workforce,” Reuters noted.
Across the globe, many healthcare workers—including clinical laboratory scientists in countries like New Zealand—are feeling burnt out from working in understaffed departments for inadequate pay. Hopefully, in response to these strikes, governments and healthcare leaders can come to resolutions that bring critical medical specialists back to work.
It is more than a shortage of nurses, as most clinical laboratories report the same shortages of medical technologists and increased labor costs
Just as hospital-based clinical laboratories are unable to hire and retain adequate numbers of medical technologists (MTs) and clinical laboratory scientists (CLSs), the nursing shortage is also acute. Compounding the challenge of staffing nurses is the rapid rise in the salaries of nurses because hospitals need nurses to keep their emergency departments, operating rooms, and other services open and treating patients while also generating revenue.
The nursing shortage has been blamed on burnout due to the COVID-19 pandemic, but nurses also report consistently deteriorating conditions and say they feel undervalued and under-appreciated, according to Michigan Advance, which recently covered an averted strike by nurses at 118-bed acute care McLaren Central Hospital in Mt. Pleasant and 97-bed teaching hospital MyMichigan Medical Center Alma, both in Central Michigan.
“Nurses are leaving the bedside because the conditions that hospital corporations are creating are unbearable. The more nurses leave, the worse it becomes. This was a problem before the pandemic, and the situation has only deteriorated over the last three years,” said Jamie Brown, RN, President of the Michigan Nurses Association (MNA) and a critical care nurse at Ascension Borgess Hospital in Kalamazoo, Michigan Advance reported.
“The staffing crisis will never be adequately addressed until working conditions at hospitals are improved,” said Jamie Brown, RN (above), President of the Michigan Nurses Association in a press release. Brown’s statement correlates with claims by laboratory technicians about working conditions in clinical laboratories all over the country that are experiencing similar shortages of critical staff. (Photo copyright: Michigan Nurses Association.)
Nurse Understaffing Dangerous to Patients
In the lead up to the Michigan nurses’ strike, NPR reported on a poll conducted by market research firm Emma White Research LLC on behalf of the MNA that found 42% of nurses surveyed claimed “they know of a patient death due to nurses being assigned too many patients.” The same poll in 2016 found only 22% of nurses making the same claim.
And yet, according to an MNA news release, “There is no law that sets safe RN-to-patient ratios in hospitals, leading to RNs having too many patients at one time too often. This puts patients in danger and drives nurses out of the profession.”
Seven in 10 RNs working in direct care say they are assigned an unsafe patient load in half or more of their shifts.
Over nine in 10 RNs say requiring nurses to care for too many patients at once is affecting the quality of patient care.
Requiring set nurse-to-patient ratios could also make a difference in retention and in returning qualified nurses to the field.
According to NPR, “Nurses across the state say dangerous levels of understaffing are becoming the norm, even though hospitals are no longer overwhelmed by COVID-19 patients.”
Thus, nursing organizations in Michigan, and the legislators who support change, have proposed the Safe Patient Care Act which sets out to “to increase patient safety in Michigan hospitals by establishing minimum nurse staffing levels, limiting mandatory overtime for RNs, and adding transparency,” according to an MNA news release.
Huge Increase in Nursing Costs
Another pressure on hospitals is the rise in the cost of replacing nurses with temporary or travel nurses to maintain adequate staffing levels.
In “Hospital Temporary Labor Costs: a Staggering $1.52 Billion in FY2022,” the Massachusetts Health and Hospital Association noted that “To fill gaps in staffing, hospitals hire registered nurses and other staff through ‘traveler’ agencies. Traveler workers, especially RNs in high demand, command higher hourly wages—at least two or three times more than what an on-staff clinician would earn. Many often receive signing bonuses. In Fiscal Year 2019, [Massachusetts] hospitals spent $204 million on temporary staff. In FY2022, they spent $1.52 billion—a 610% increase. According to the MHA survey, approximately 77% of the $1.52 billion went to hiring temporary RNs.”
It’s likely this same scenario is playing out in hospitals all across America.
Are Nursing Strikes a Symptom of a Larger Healthcare Problem?
“But the problem is much bigger,” Fortune wrote. “Care workers—physicians, home health aides, early childhood care workers, physician assistants, and more—face critical challenges as a result of America’s immense care gap that may soon touch every corner of the American economy.”
Clinical laboratories are experiencing the same shortages of critical staff due in large part to the same workplace issues affecting nurses. Dark Daily covered this growing crisis in several ebriefings.
We also covered in that ebrief how the so-called “Great Resignation” caused by the COVID-19 pandemic has had a severe impact on clinical laboratory staffs, creating shortages of pathologists as well as of medical technologists, medical laboratory technicians, and other lab scientists who are vital to the nation’s network of clinical laboratories.
Hospitals across the United States—and in the UK, according to Reuters—are facing worker strikes, staff shortages, rising costs, and uncertainty about the future. Just like clinical laboratories and other segments of the healthcare industry, worker burnout and exhaustion in the wake of the COVID-19 pandemic are being cited as culprits for these woes.
But was it predictable and could it have been avoided?
“One of the big things to clear up for the public is that … we saw the writing on the wall that vacancies were going to be a problem for us, before the pandemic hit our shores,” Christopher Friese, PhD, professor of Nursing and Health Management Policy at the University of Michigan (UM), told NPR. Friese is also Director of the Center for Improving Patient and Population Health at UM.
Effects of the COVID-19 pandemic, and staffing shortages exasperated by it, will be felt by clinical laboratories, pathology groups, and the healthcare industry in general for years to come. Creative solutions must be employed to avoid more staff shortages and increase employee retention and recruitment.
