Home » News » Recent Articles:

Best Practices Coming Soon to a Virtual Visit Near You

April 25, 2016 News Comments Off on Best Practices Coming Soon to a Virtual Visit Near You

Top telemedicine vendors weigh in on a recently published study calling for them to share best practices.
B
y @JennHIStalk

image

A recent JAMA-published study comparing quality of care among six telemedicine vendors highlights the growing pains that this evolving method of healthcare delivery seems to be going through. The clinical variation found in the virtual visits – ranging from asking the proper questions and performing the correct examination steps to ordering medically indicated tests – prompted researchers to recommend that telemedicine vendors share best practices.

It’s a novel idea, one that suggests telemedicine is ready to move from its awkward “tween” phase to becoming a more mature and collaborative force. Would sharing best practices reduce clinical variation? Do telemedicine vendors or other stakeholders foresee improved patient care (or the chance to market themselves better) if they were to follow standards and share best practices? Would such collaboration even be feasible?

These are the questions that will drive telemedicine stakeholders — including payers and organizations like the American Telemedicine Association (ATA) — to the next phase of market maturity.

Aren’t We There Yet?

Some may argue that telemedicine already has standards in place. They would be half right. Most if not all vendors have their own internal set of guidelines and clinical best practices, in addition to those published by the Federation of State Medical Boards and the American Medical Association (AMA).

image

image

Doctor on Demand, for example, implemented protocols from Day One that include a double-blinded peer review, daily visit feedback, and an antibiotic stewardship program.

“We employ our doctors, which I think is a big differentiator,” says Doctor on Demand Chief Medical Officer Ian Tong, MD. “For instance, we couldn’t do our peer review program with a group of independent contractors who are just getting on our platform periodically to make some extra money and moonlight. That’s much more difficult to do.”

“The way that we leverage technology allows us to monitor a number of things,” he adds, “including duration of the visit, idle time for the doctor, and patient satisfaction scores. We can aggregate that information and give our physicians feedback, letting them see patient comments at the end of every day.”

“Am I ready to say that everything I just listed is the best practice?” Tong asks. “Not yet, but I doubt anyone’s doing more. I can tell you that brick-and-mortar practices don’t do half the things I just listed. Eventually those may lead to the development of best practices, but you have to go through a certain amount of market maturity.”

Getting Past the Growing Pains

image

image

Most telemedicine vendor executives agree that market maturity is a work in progress and that shared best practices won’t become the norm until the average consumer, employer, and even payer sees the benefit in virtual care.

“We wholeheartedly believe that absolute transparency in best practices and lessons learned from mistakes are key to allowing this industry to move forward responsibly,” says American Well President and CEO Roy Schoenberg, MD, MPH. “The biggest hurdle to telemedicine is the still prevailing misconception of what it can do and the operating know-how of how to make it a safe extension of traditional care delivery.”

image

image

Scaling telemedicine’s potential in terms of user acceptance and technical capability is top of mind for the entire market right now. “The industry is in its infancy based on the market potential,” explains Teladoc Chief Medical Officer Henry DePhillips, MD, who adds that the market potential for telemedicine visits is about 550 million interactions annually. “We’re predicting that we’ll do 900,000 visits this year,” he says, “and so we’re just barely scratching the surface of the market’s potential, which has a lot to do with why, up until now, best practices have not yet been established.

“A misstep by any of the vendors in the space will potentially have a negative impact on the entire industry, not just that particular vendor,” DePhillips adds. “I think it’s incumbent on all of us to have really high standards for clinical quality of care, patient safety, reporting, record keeping, and patient experience because the industry needs to keep moving forward.”

Third Parties Attempt to Take the Lead

It’s not for lack of trying that a nationally recognized set of telemedicine best practices has not been created and adopted among stakeholders. Organizations like the ATA, Health Information Trust Alliance (HITRUST), National Committee for Quality Assurance, and URAC (formerly known as the Utilization Review Accreditation Commission) have attempted to drive the best practices conversation via certification programs.

Tong sees immense value in attaining third-party accreditations, and points out that Doctor on Demand has certifications from ATA, NCQA, and HITRUST, “which is really important, but not as sexy. That involves the security of your health records and platform. I think that’s actually a pretty high bar, to be honest. A lot of hospitals don’t have all three of those certifications.”

Teladoc has pursued similar recognition and was the first telemedicine vendor to achieve NCQA recognition. “There are a number of players in the industry that want to be seen as the stamp of approval for the telemedicine industry,” DePhillips says. “I think they’re all heading in the right direction in raising the bar on patient safety and care quality, but I don’t think any of them have really figured out how to dominate that part of the industry yet.”

image

He does see potential in some kind of Energy Star-like stamp of approval for telemedicine. “I think the concept of having trusted third-party validation is correct,” he explains. “End users will eventually look for that. We actually display the NCQA logo on our website. I think that it will help business. It’s just a matter of which third party you want to hang your hat on at the moment. I think the players, from the stamp-of-approval standpoint, are probably going to shift over time.”

Schoenberg is in accord with his competitors, adding that telemedicine’s eventual stamp of approval will need to have two parts – “approval for the quality and safety of the platform used and a recognition of the quality of the clinical service, which will be implied by the already familiar brands offering it, e.g. Blue Cross Blue Shield, UnitedHealth, Cleveland Clinic, etc.”

Competitive Collaboration is Key for Now

While stakeholders wait for the gold standard of telemedicine certification to emerge, vendors like those reviewed in the JAMA article have focused on collaborating with each other to ensure best practices are shared in the interests of all.

image

“Although we compete for customers, we collaborate in many ways,” says DePhillips, noting that Teladoc is a member of the ATA and Alliance for Connected Care, a DC-based think tank that includes other broadly defined telemedicine companies. “When it comes to regulatory, care quality, and/or patient safety issues, there’s actually a lot of collaboration among at least the top-tier telemedicine companies,” he adds. “I actually have a professional relationship with my counterpart at our primary competitors. We’ll get together occasionally and talk about how we can work together to solve regulatory issues, most of which are in the past. In some cases, some of the companies will pool funds to help with a regulatory issue. We will not pool resources, but we’ll have a pretty good, detailed conversation around the best approach to patient safety, what standards are out there from the various specialty societies, and what we should be following as an industry. Like I said, a rising tide truly raises all ships. That’s the industry we’re in, especially at this level of maturity.”

Vetting Vendors in the Meantime

For now, potential users will have to use their best judgment in selecting telemedicine services for their members, employees, or themselves. In addition to the certifications mentioned, Schoenberg, Tong, and DePhillips have their own must-haves and red flags for vetting vendors.

“Video visits are a must,” says Tong. “It’s also important to look at the quality of the physicians. What are the hiring practices and training regimens? What are the quality assurance programs that practice has in place? They may not all want to give you their secret sauce, but I think it’s very reasonable to ask, ‘How do you do that?’”

DePhillips believes that, in addition to quality and patient safety assurances, potential customers should look at three key things. “When I look at the younger, smaller players in the industry, I find that they tend to cut corners in two areas. Number one is the way in which they put their provider network together. There’s no other company besides Teladoc that has licensed providers that are physically present in all 50 states. A lot of this cross-state licensing discussion is a non-issue for us. It’s heavy lifting and it’s expensive, but we chose to do that because we think it’s the best route to take. Vendors should also have the infrastructure to support future adoption and to scale.”

Schoenberg’s advice takes a more high-level approach: “First, map out all that you want to do with telemedicine — urgent care, follow-up care, provider-to-provider consults, etc. — and ask the vendor to show you how they can support it. Then, map out all of the systems you will need those services to integrate or exchange data with, and ask the vendor to show you how they can do that. Then, think of what it will take to roll out to all involved – patients, providers, payment stakeholders, marketing, actuaries – and ask the vendor to show their depth of understanding of what needs to be done to be successful in each. Finally, look for leadership you can trust to keep you ahead of the curve as the world of delivering healthcare via technology explodes forward.”

Monday Morning Update 4/25/16

April 24, 2016 News 9 Comments

Top News

image

Lockheed Martin lays off 200 IT employees in preparing for the $5 billion merger of its IT business with Leidos.

It’s called a merger rather than an acquisition because the companies are using a tricky Reverse Morris Trust so Lockheed can exit the IT business without paying taxes on its gain. A company creates a subsidiary, the subsidiary merges with another company to form a new company, and the new company then issues at least 50 percent of shares back to the original company’s shareholders.


Reader Comments

image

From Madison: “Re: Nordic. No more word of what happened with the Drew Madden sexual harassment and retaliation charges, but it looks like Nordic wanted a change. First they brought in a new CEO, moving Drew to president. Now he seems to be gone — he is no longer referenced on their page.” The LinkedIn profile of former Nordic President Drew Madden shows he left the company this month, with a tagline he added saying, “Honored and blessed to have worked for THE BEST company in the business!” A former marketing VP filed a complaint in 2014 against Nordic with Madison, Wisconsin’s Equal Opportunity Division, claiming she was fired for complaining about suggestive texts sent her by Madden, while Nordic says the VP willingly participated in such attention, their banter was lighthearted and not unusual for co-workers, and she was fired for poor performance. You can read what he said and she said.

From Finally: “Re: Epic. Heard they’re on a hiring freeze for roles they have been continually hiring for (implementation, development, etc.) for years. Seems like they overstaffed with optimistic thoughts of government deals.” Unverified. 

From Ben: “Re: Vail Valley Medical Center. Therapist steals medical records.” The Colorado hospital will inform 3,100 patients that a former physical therapist copied their medical records onto a thumb drive before leaving to join a new employer. The hospital says it has since added restrictions on how employees can copy patient files and adds that police are investigating.


HIStalk Announcements and Requests

image

It was nearly an even split between poll respondents who would be concerned about their privacy if they were being treated for depression by an EHR-using provider. Some respondents commented that the real problem is the perception of mental health issues as a personal weakness. Tami summarizes well in saying, “Depression and mental needs to be treated more along the lines of cancer. If you can get help before it progresses too far, treatment can be easier and perhaps quicker. If you wait too long, it can be a death sentence. There are risks with every piece of data that leaves you.”

New poll to your right or here: what is the best answer for reducing the time doctors spend entering data into EHRs?

image image

We fulfilled the DonorsChoose grant request of Ms. Hamilton, whose Arizona special education middle school class asked for timers, books, and math games. She reports that the students are now competitively playing multiplication bingo and challenge themselves to beat the clock in completing their assignments.

image image

Also checking in is Mrs. Bierhals, whose Pennsylvania second grade class received programmable robot kits and an iPad Mini. She says, “The children have been using the items from the minute we received them. We have managed to build all the robots and programmed them to run on different frequencies. Since the weather is starting to break, we are planning on having Robot Races outside for the end of the year. Now we have to work on their driving skills.”

I think we’re entering the summer health IT doldrums, at least as evidenced by the paucity of significant, interesting news items.

I wasn’t much of a Prince fan, but like a lot of people who are jarred into paying attention only after someone famous dies, I’m learning what I’ve missed in appreciating 2004 video of an ultra-cool Prince leading a supergroup with his scorching guitar solo on “While My Guitar Gently Weeps.”

image

Comcast, the “Most-Hated Company in America” that provides around half of the residential broadband connections in the US (under the Xfinity name) where many of its customers don’t have an alternative, finds a loophole around net neutrality to try to protect its cable and content businesses against cord-cutters who decide they only need a Roku box running Netflix or Hulu. The company is rolling out Internet usage caps that work like cell phone data plans in charging customers extra if they run over Comcast’s limit. Use of Comcast’s own Stream TV service doesn’t count since technically it uses Comcast’s wire but not the Internet, putting Netflix at a huge disadvantage. Comcast says the change is about fairness since customers who use less data pay less, but that’s not exactly true – nobody pays less and the best you can hope is to not get dinged extra for the same service. Complaints suggest that people are avoiding buying houses in areas where Comcast is the only source of Internet connectivity. Please, Google, put fiber everywhere.


Last Week’s Most Interesting News

  • Maine becomes the second state to mandate electronic prescribing of narcotics.
  • Patient privacy finally trumps the demand for medical reality TV as New York-Presbyterian pays $2.2 million to settle HIPAA charges that it provided patient information to TV crews.
  • Parrish Medical Center (FL) says its IT payments spat with McKesson is endangering patients as the company stops providing drug database updates and threatens to pull its entire product line from the hospital.
  • The federal government launches a criminal probe of Theranos.
  • Court filings of MetroChicago HIE’s lawsuit against the defunct HIE vendor Sandlot Solutions show the HIE desperately trying to restore its Sandlot-housed data before the company closed its doors for good.
  • Canada’s Alberta Health Services says it will RFP a new system, expecting to spend at least $316 million to replace 1,300 mostly non-interoperable systems whose purchase it subsidized.
  • A Wisconsin jury awards Epic $940 million in its trade secrets lawsuit against India-based Tata Group.
  • VA CIO LaVerne Council hints that the VA plans to built a VistA replacement instead of buying a commercial product, telling Congress that a working prototype of a product she likens to Facebook and Google will be ready within a few months. She also confirms that she has placed the VA’s $624 million patient scheduling system contract with Leidos and Epic on hold while they test a homegrown product that will cost only one-tenth as much.

Webinars

April 26 (Tuesday) 1:00 ET. “Provider-Led Care Management: Trends and Opportunities in a Growing Market. ”Sponsored by HIStalk. Presenter: Matthew Guldin, analyst, Chilmark Research. This webinar will provide a brief overview and direction of the provider-led care management market. It will identify the types of vendors in this market, their current and longer-term challenges, product capabilities, partnership activity, and market dynamics that influence adoption. It will conclude with an overview of key factors for vendors and solutions moving forward.

May 5 (Thursday) 2:00 ET. “Reducing CAUTI and Improving Early Sepsis Detection Through Clinical Process Measurement.” Sponsored by LogicStream. Presenters: Jen Biltoft, director of quality improvement, SCL Health; Marla Bare, EHR architect, SCL Health. This webinar will describe how SCL Health reduced catheter-associated urinary tract infections by 30 percent in just three months through clinical process measurement. The SCL Health presenters will also share their plans for applying a similar process to the early detection of sepsis.

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Technology

image

Several CNET editors who bought Apple Watches but then stopped wearing them say it doesn’t really do anything useful, its apps are lame, it’s easier to just pull out a phone, and it’s too complicated. Even Apple co-founder Steve Wozniak isn’t impressed:

I worry a little bit about — I mean I love my Apple Watch, but it’s taken us into a jewelry market where you’re going to buy a watch between $500 or $1,100 based on how important you think you are as a person. The only difference is the band in all those watches. Twenty watches from $500 to $1,100. The band’s the only difference? Well this isn’t the company that Apple was originally, or the company that really changed the world a lot.


Other

image

A JAMIA article says hospitals should not prohibit testing in their EHR’s production environment because test environments can’t perfectly mimic the live system’s interfaces and realistic patient data. I ran a poll in February at the suggestion of Dean Sittig, one of the authors, and 15 percent of respondents said they never allow creating test patients in production. The article offers these tips:

  • Test software changes in the test environment first, then enable the change in production for a small group of testers if possible.
  • Use distinctive names for test patients in the production environment, using a consistent prefix such as” ZZZtestingBWH345, OneTest” rather than cute names like “Santa Claus” or names like “Test” that actually exist as real patient names.
  • Create specific user accounts for testers and lock them out of making changes to non-test patients if possible, auditing their transactions to make sure they are performing only approved work.
  • Train downstream personnel on how to respond when they see the results of test patient transactions and notify them before testing starts.
  • Filter test patients from reports and data extracts.

image

The death of Prince at 57 caused folks to look back on a year-old research paper that analyzed the deaths of US pop musicians, finding that they die nearly 20 years younger than the rest of us, with the most common age at death being 56. The author even looked at deaths by musical genre, finding that gospel singers had a better quality of life while rappers are nine times more likely to die by homicide than the average person. Metal and punk performers were much more likely die by accident or to commit suicide.

image

image

The Rochester, MN paper notes that Mayo Clinic has nicknamed its Epic project Plummer to honor internist and endocrinologist Henry Plummer, MD, who created Mayo’s practice model in 1910. He also developed the clinic’s “one patient, one record” paper records system and the pneumatic tube delivery system to deliver them (it was the interoperability API of its time). Apparently he was well compensated (or well inherited) since he built Plummer House, his 300-foot-long, five-story family Tudor estate on 65 acres that features 49 rooms, 10 bathrooms, and nine bedrooms. His mark as an innovator carried over into the design of Plummer House, which when completed in 1924 had a central vacuum system, underground sprinklers, a security system, garage door openers, a heated pool, and the city’s first gas furnace.

Here’s the first of three “2016 HIS Vendor Review” summaries from Vince Ciotti and Susan Pouzar of HIS Professionals.

Imprivata creates a pretty funny video urging hospitals to “ditch your page boy.” I noticed immediately that for both patients pictured, their vital signs monitors are working great despite not being attached to them (perhaps there’s a wireless innovation there as well) and that the guy’s IV drip is not actually dripping into him. I noticed a few other mistakes at re-creating a hospital room – do you?


Sponsor Updates

  • T-System will exhibit at ILHIMA Annual Meeting April 28-30 in Tinley Park, IL.
  • Verisk Health’s Sam Stearns and Molly Grimes contribute an article to Employee Benefit News on optimizing the value of maternity care.
  • Huron Consulting Group will exhibit at the Association of Information and Image Management Conference April 26-28 in New Orleans.
  • ZeOmega will host its Connections 16 client conference May 2-4 in Dallas.
  • Xerox will host a Google+ Hangout on population heath management May 5 at 1pm ET.
  • YourCareUniverse publishes a new white paper, “Addressing the Rise of Healthcare Consumerism & The New Marketing Reality.”
  • ZirMed will exhibit at the Radiology Business Management Association Summit April 24-26 in Colorado Springs, CO.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

News 4/22/16

April 21, 2016 News Comments Off on News 4/22/16

Top News

image

Maine will require prescriptions for narcotic drugs be transmitted to pharmacies electronically beginning January 1, 2018. Prescribers of narcotics and benzodiazepines will also be required to check the state’s prescription monitoring database before issuing a new prescription and every 90 days as the prescription is renewed.


Reader Comments

image

image

From Meditech-Using CIO: “Re: Meditech. This comment from their 10-K is one of many reasons the company in its current state won’t be the company they seem to think it will be. Essentially all of its 2015 income was given back to shareholders as dividends rather than increasing R&D or hiring more talent. The whole corporate structure seems to be based on shareholder enrichment. Also, take a look at product revenue, which has dropped by nearly half in two years. Perhaps the problem is that everybody on the leadership team started with the company right out of school – not one executive knows anything other than Meditech, which I cannot imagine under any scenario being a good thing unless you’re all about dividend income.” Meditech’s executives average 36 years of employment with the company, starting their careers there at an average age of 25. The least-tenured of the executive team joined Meditech in 1990. I’m anxiously awaiting the company’s Q1 numbers, which rumors suggest will be highly interesting.


HIStalk Announcements and Requests

image image

We funded the DonorsChoose grant request of Ms. W, who asked for three tablets for her California second graders. She has installed reading and math practice apps and says, “The tablets have been especially useful for my most struggling readers. They often have a hard time working independently during reading rotations. They all try really hard, but get stuck on some of the work. The tablets have given them an opportunity to work on fluency and sight words with a little more support even when a teacher is not available to help them out.”

image image

Also checking in is Ms. Read from Texas, whose middle school class received a bunch of electrical components for working on “squishy circuits.”

This week on HIStalk Practice: AMA launches the Healthier Nation Innovation Challenge. Urgent Team goes with DocuTap’s EHR, PM, and billing software. Physician’s Computer Company works with ThinkMD to bring its MEDSINC technology to the US market. The Massachusetts League of Community Health Centers selects HIE connectivity consulting services from EMedApps. Everseat offers users rides to their doctor appointments via Lyft. SingleCare partners with AmericanWell to offer Pittsburgh members virtual consults. Robin Zon, MD of Michiana Hematology Oncology shares her experience with patient-friendly clinical trial technology.

We’re down another music legend on the year as Prince dies at 57.

Listening: new frantic, ragged dairy punk from Appleton, WI’s Tenement, a necessary antidote to over-produced, soulless musicians who never seem to sweat or express any emotion other than self-admiration.


Webinars

April 26 (Tuesday) 1:00 ET. “Provider-Led Care Management: Trends and Opportunities in a Growing Market. ”Sponsored by HIStalk. Presenter: Matthew Guldin, analyst, Chilmark Research. This webinar will provide a brief overview and direction of the provider-led care management market. It will identify the types of vendors in this market, their current and longer-term challenges, product capabilities, partnership activity, and market dynamics that influence adoption. It will conclude with an overview of key factors for vendors and solutions moving forward.

May 5 (Thursday) 1:00 ET. “Reducing CAUTI and Improving Early Sepsis Detection Through Clinical Process Measurement.” Sponsored by LogicStream. Presenters: Jen Biltoft, director of quality improvement, SCL Health; Marla Bare, EHR architect, SCL Health. This webinar will describe how SCL Health reduced catheter-associated urinary tract infections by 30 percent in just three months through clinical process measurement. The SCL Health presenters will also share their plans for applying a similar process to the early detection of sepsis.

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

Non-profit insurer EmblemHealth lays off 250 IT and operations employees and contracts their work out to Cognizant. EmblemHealth says using systems offered by Cognizant subsidiary TriZetto will save hundreds of millions of dollars in development costs and won’t require company maintenance resources. Displaced employees are complaining that they have been asked to train their offshore replacements. The attorney who was helping EmblemHealth’s IT employees unionize posts a video in which EmblemHealth CEO Karen Ignagni announces the layoffs. She has been CEO for just seven months following  long career as lobbyist-CEO of the American Association of Health Plans, but before that, she ironically worked for the AFL-CIO as director of employee benefits.

image

Microsoft reports Q3 results: revenue up 2 percent, EPS $0.62 vs. $0.61, missing earnings expectations.

image

Venture capitalist Bill Gurley says the the Silicon Valley “unicorn” bubble burst when the Wall Street Journal started its investigation of Theranos. He makes these points about those privately held companies with paper valuations of more than $1 billion:

  • Theranos is an example of a company that raised money from a handful of investors with a high paper valuation, but that doesn’t mean the company is doing well or that shares are worth the valuation imputed by what those investors paid.
  • Unicorns have rarely gone public, leaving insiders no way to cash out.
  • High-profile startups are failing and laying off employees in attempt to slow their record-setting burn rates.
  • Mutual funds are writing down some of their overly optimistic unicorn investments.
  • Nervous investors are asking questions about profit, not just the previous goal of growth at any cost.
  • CEOs desperately want to avoid new funding rounds at lower valuation, investors don’t want to write down investments that previously looked successful, and founders may cash in ahead of their investors in a rush to the exits.
  • Opportunistic “shark” investors are offering funding with ugly terms buried in the details that underlie their seemingly high valuation, allowing entrepreneurs to prop up a high valuation with a ticking time bomb of unfavorable terms that can only be dodged with a successful IPO.
  • Entrepreneurs accustomed to readily available capital will find it hard to accept new funding rounds at lower valuations, the pressure to quickly become profitable, or to reverse “stay private longer” thinking and prepare for an IPO.
  • Gurley concludes, “Founders have come to believe that more money is better, and the fluidity of the recent funding environment has led many to believe that heroic fundraising is a competitive advantage. Ironically, the exact opposite is true. The very best entrepreneurs are relatively advantaged in times of scarce capital. They can raise money in any environment. Loose capital allows the less qualified to participate in each market. This less qualified player brings more reckless execution which drags even the best entrepreneur onto an especially sloppy playing field. This threatens returns for all involved.”

Sales

image

Centra (VA) chooses Cerner Millennium and HealtheIntent for its five hospitals and 50 non-hospital locations. 


People

image image

HealthLoop names Bevey Minor (MarketPoint) as chief marketing and development officer and Harry Kirschner (The Advisory Board Company) as chief revenue officer.


Announcements and Implementations

image

Mount Sinai Health System (NY) joins the OpenNotes movement.

image

Northwell Health (the former North Shore-LIJ) announces that its 3D bioprinting body replacement parts project will receive $100,000 in additional funding after it received the most public votes among three of its innovation projects. Northwell will spin the project off as a separate company, which expects to have the technology ready for human use in five to 10 years.


Government and Politics

Politico reports that the Coast Guard has terminated its Leidos/Epic EHR project without any sites going live after spending $60 million, which is hardly news since I reported it here (and confirmed it with Epic) on October 7, 2015.

The State of Utah declares pornography to be a public health hazard that creates psychological and physiological addiction, although the non-binding resolution carries no funding to do anything about it.

image

England’s Health and Social Care Information Centre renames itself to NHS Digital, with Noel Gordon named chair.


Privacy and Security

image

New York-Presbyterian Hospital (NY) pays $2.2 million to settle HIPAA charges of disclosing PHI to the ABC crews filming the TV series “NY Med.”

Crouse Hospital (NY) fires one of its medical residents after he was caught hiding two spy pen cameras in one of the hospital’s ICU bathrooms. The doctor’s lawyer says his client – who also has three years’ experience as an investigative reporter — was trying to find the person who stole his Adderall prescription and GoPro camera, noting that the spy cameras weren’t pointed at the toilet and did not record anyone identifiable on the video.

image

The information of 3,200 patients of Wyoming Medical Center (WY) is exposed when two employees click links in phishing emails. The hospital says its email system contained PHI, such as medical record numbers, dates of service, and some medical information. One of the affected patients is the hospital’s CEO.


Other

Another healthcare payment quirk: a woman’s doctor-ordered genetic test isn’t covered by her insurance company because they say it’s experimental, but instead of being billed at the testing company’s $349 uninsured patient rate, they insist that she pay $1,494, the amount the company charges insurance companies. In other words, having insurance cost her an extra $1,145.

image

Arizona State University’s business school names McKesson Chairman, President, and CEO John Hammergren as its 2016 Executive of the Year, in which it recognizes “top executives who serve as exceptional models for future business leaders.”

image

An Orlando TV station says patients are being endangered at Parrish Medical Center (FL), which is suing McKesson for what it says is a botched software implementation. The hospital claims McKesson shut off its access to drug database updates and has threatened to remove all of its products the hospital uses if the hospital doesn’t pay the bills it is disputing. Parrish signed up for Horizon Clinicals, Horizon Enterprise Revenue Management, business intelligence, cardiovascular information system, ambulatory PM/EMR, and RelayHealth in February 2011.

I ran across a study concluding that only about half of psychiatrists (as surveyed in 2009) accept medical insurance, the lowest insurance acceptance rate of all specialties. That means those already-alarming studies showing that most behavioral information isn’t visible in EHRs actually understate the problem – they assumed that the denominator was the number of visits found in claims databases, but those visits insurance didn’t cover wouldn’t be recorded anywhere except in the private records of the mental health professionals.

A federal appeals court rules that Reading Hospital (PA) isn’t liable for the injuries sustained by an AMN Healthcare contractor who sued the hospital after falling down a flight of stairs while supporting the hospital’s Epic go-live. The court ruled that AMN’s contractor was actually a hospital employee because the hospital directed his work, leaving him unable to sue the hospital for personal injury because he was already covered as a “borrowed servant” by workers compensation.

image

Fox consumer affairs TV reporter John Stossel, writing from his New York-Presbyterian Hospital bed, says the hospital’s care is good but its customer service isn’t:

Doctors keep me waiting for hours, and no one bothers to call or email to say, "I’m running late." Few doctors give out their email address. Patients can’t communicate using modern technology … I fill out long medical history forms by hand and, in the next office, do it again. Same wording: name, address, insurance, etc. … In the intensive care unit, night after night, machines beep, but often no one responds … Patients will have a better experience only when more of us spend our own money for care. That’s what makes markets work.


Sponsor Updates

  • Iatric Systems will exhibit at ANIA 2016 April 21-23 in San Francisco.
  • Influence Health will host its annual Client Congress April 24-27 in Phoenix.
  • Ingenious Med is recognized as a Pacesetter by the Atlanta Business Chronicle for the fourth year in a row.
  • Cumberland Consulting Group will offer legacy system data management services in conjunction with Trinisys.
  • Leidos donates $32,000 to the Special Operations Warrior Foundation through a Defend the Rim campaign with the Washington Wizards.
  • Life Science Nexus features LogicStream Health in a new blog.
  • Agency Spotter Founder Brian Regienczuk interviews Medecision CMO Ellen Donahue-Dalton about healthcare marketing trends.
  • Netsmart will exhibit at the CIBHS National Behavioral Health Information Management Conference & Expo April 27 in Garden Grove, CA.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Morning Headlines 4/21/16

April 20, 2016 News 1 Comment

Report to Congress April 2016

In a MACRA-mandated report to Congress, ONC evaluates the feasibility of establishing an EHR comparison tool to support providers evaluating health IT products.

2016 Cyber Security Intelligence Index

IBM publishes its 2016 Cyber Security Intelligence report cites healthcare as the most targeted industry for cyber attacks in 2015.

US to Delay Release of New Hospital Ratings

CMS announces that it will hold off on publishing quality ratings for hospitals until July amid questions from health providers and Congress over the methodology behind the ratings, “We are concerned that the star rating system may be misleading to consumers due to flaws in the measures that underpin the ratings,” states an April 11 letter signed by 60 senators.

Here’s Why This Genetics Biotech’s Stock Plunged Today

Gene sequencer manufacturer Illumina’s shares dropped 23 percent Tuesday after reporting preliminary Q1 revenue of $572 million, missing its forecasted $596 million, and lowering its projected 2016 growth from 16 percent to 12 percent.

News 4/20/16

April 19, 2016 News 7 Comments

Top News

image

Federal prosecutors launch a criminal investigation of Theranos, seeking to determine whether the lab company misled regulators and investors about its technology. Founder Elizabeth Holmes said during her squirmy and somewhat creepy “Today” show appearance on Monday (sans her trademark black turtleneck, but sporting her equally common deer-in-the-headlights look) that she was “devastated” to learn of extensive company failings of which she was previously unaware.

Holmes confidently told “Today” that the company will survive because the world needs it, although I wouldn’t be so sure. She says Theranos will “rebuild this entire laboratory from scratch.” Maybe the show’s label of Holmes as “billionaire” (on paper, anyway) was correct before the hydrogen-filled Theranos zeppelin went down in flames, but I doubt anyone would buy the entire, permanently tarnished Theranos for anywhere close to $1 billion at this point.

The mistake Holmes made in starting Theranos as a rich, Stanford dropout (at 19) was proclaiming it to be a high-valuation, disruptive Silicon Valley tech startup rather than a tiny entrant into the boring back office lab system business that is dominated by Quest and LabCorp, failing to put reasonable clinical oversight in place and competing with them mainly on price (although the sustainability of even that business model has yet to be proven). It’s  OK and maybe even desirable to be quirky, obsessively focused, publicity-shy, and inexperienced when you’re starting a faddish website for easily amused 20-somethings, but less so when you’re running a federally regulated medical business with lives on the line.


Reader Comments

image

From CarrolltonObserver: “Re: Greenway Health. Tee Green is stepping away and another 100 employees were let go last week. My guess is that Tee is slowly stepping away to get into politics.” See  my mention in the People section below. The company says Tee “will remain in an active, full-time role as executive chairman, focusing on innovation and growth initiatives,” which sounds like work more appropriate to the position he left than the one he’s taking. 

image

From Blue Horseshoe MD: “Re: cholera in Haiti. This article that describes the US implications is mind-blowing, but it also demonstrates the power of data visualization in epidemiology and thus in medicine.” Haiti’s cholera epidemic, which has killed nearly 10,000 people and infected 775,000 others, was apparently caused by UN peacekeepers from Nepal who brought the disease with them and from whom it spread due to negligent sanitation practices. The article says the CDC and the US administration are trying to hide the outbreak’s source by using questionable public health tracking measures. No cases of cholera had ever been reported in Haiti until the peacekeepers arrived and geo-mapping of reported cases points directly to the UN facility, with a CDC official going on record in unscientifically characterizing its response as, “We’re going to be really cautious about the Nepal thing because it’s a politically sensitive issue for our partners in Haiti.”

image

Speaking of the value of data visualization, the Johns Hopkins Bloomberg School of Public Health launches a fully online, part-time masters in spatial analysis for public health.

From How EMRya?: “Re: the EMR replacement market. All the vendors thought the high EMR dissatisfaction rate would keep the market going with replacements. I don’t think it evolved that way. Physicians burned themselves out with their selection process within the past five years and don’t want to go through it again with vendors that seem about the same. Companies like NextGen and Greenway are retooling their business to an EBIDA strategy of just holding onto the base in running a profitable company in a saturated market.” I agree that it’s not likely that large numbers of physicians will want to go through choosing and implementing a new EHR no matter how unhappy they are with their current one. Even if they do eventually switch, it would be tough to build a stable business based on what they might do and when they might do it. I predicted early in the HITECH days that vendors would scale up to meet temporary demand, but then find it hard to shrink back down once they had blown through their share of the taxpayer billions. Maybe that’s why everybody from Allscripts to EClinicalWorks is trying to pivot into something fresh that’s outside their historic core competency, which usually ends up being population health management for lack of alternatives.


HIStalk Announcements and Requests

image

Welcome to new HIStalk Platinum Sponsor PokitDok. The San Mateo, CA-based company (its name is pronounced “pocket doc”) offers a healthcare API ecosystem that meets consumer-driven healthcare market demands. APIs include clearinghouse (enrollment, eligibility, authorizations, claims, claims status, referral – all of those X12 APIs are free); patient scheduling (across all major PM/EHR systems); identity management (EMPI queries); payment optimization (medical financing qualification tools); and a Private Label Marketplace for provider search (scheduling, eligibility, payments).  Customers use these APIs to connect doctors to patients, to help payers and providers develop new business functions, and to connect EHRs and other digital health services. PokitDok’s APIs allow startups to scale immediately with lower cost, encouraging innovation and connectivity. Thanks to PokitDok for supporting HIStalk.

Here’s an overview video of PokitDok that I found on YouTube.

My latest pet peeve: people who say “pop health,” apparently challenged to find time in their day to enunciate the three additional syllables. They probably mean “population health management technology” anyway, so maybe their 10-syllable avoidance is worth it. 

image image

Mrs. Ulhaque from Texas is happy that we funded her DonorsChoose grant request for a single classroom iPad that is shared by her 24 students. She says they love playing educational games and she is rewarding students who show academic improvement with extra time on it.

image image

Also checking in is Ms. Munoz, who teaches Grade 5-6 math and science for special education students (intellectual disabilities, Down syndrome, brain injury, autism, etc.) We provided four tablets and cases, which she says have helped the students complete lessons they couldn’t previously tackle before because of their disabilities and motor skills problems.  The students who can’t write or speak are using a communications app that allows them to interact with their teachers and fellow students. Just to give you an idea of how little it costs to fund such a significant classroom project, HIStalk readers paid for half of the $363 total and Google matched that amount.


Webinars

April 26 (Tuesday) 1:00 ET. “Provider-Led Care Management: Trends and Opportunities in a Growing Market. ”Sponsored by HIStalk. Presenter: Matthew Guldin, analyst, Chilmark Research. This webinar will provide a brief overview and direction of the provider-led care management market. It will identify the types of vendors in this market, their current and longer-term challenges, product capabilities, partnership activity, and market dynamics that influence adoption. It will conclude with an overview of key factors for vendors and solutions moving forward.

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

image

A reader provided details on the lawsuit brought by the MetroChicago HIE against Sandlot Solutions. The HIE says Sandlot took away its data access one day after warning it that it would be shutting down but then provided a database copy. The HIE said that was unacceptable since any technical snags in restoring the information could cause the HIE itself to shut down. The lawsuit says Sandlot was insolvent and was closing following a failed merger attempt. Santa Rosa Consulting, listed in the lawsuit as Sandlot’s owner (which I’m not sure is exactly true – the parent of both is Santa Rosa Holdings), was a co-defendant in the lawsuit. Sandlot announced its only funding round ($23 million) about 18 months before it shut down (it’s always a red flag when a company fails to raise new money unless it’s doing so obviously well that it doesn’t need it). Interestingly, the HIE says Sandlot’s actions violated HIPAA since the company is a business associate of the HIE. Also interestingly, the lawsuit claims that Sandlot refused to provide the HIE with its data because the database would contain previously deleted data from other Sandlot customers.

image

UnitedHealth Group makes good on its earlier threat to stop offering policies on Affordable Care Act marketplaces as it loses $1 billion on those policies over the past two years. The company will offer exchange policies in only a handful of states in 2017, saying that the market isn’t growing and it’s being stuck with sicker patients as younger, healthier ones don’t see the value in buying health insurance. UHG’s policies are rarely the least expensive and it holds only a 6 percent market share.


People

image image

Scott Zimmerman (TeleVox / West Interactive) joins Greenway Health as CEO, according to his LinkedIn profile. He apparently replaces Tee Green, who is now listed on the company’s site as executive chairman.

image

Voalte hires Adam McMullin (SFW Capital Partners) as chairman and CEO.


Government and Politics

A study finds that nearly 3 percent of physicians who provide Medicare Part B services billed CMS for work that would require more than 100 hours per week, with optometrists, dermatologists, and ophthalmologists leading the pack. Those same providers also submitted more high-intensity billing codes than average. The authors suggest using Medicare’s utilization and payments data to flag potential fraud, although they probably underestimate the complexity of how providers use their National Provider Identifier to bill Medicare for services they don’t necessarily provide personally.

Florida becomes the second state to prohibit hospitals from balance-billing patients treated in their network for services rendered by the hospital’s out-of-network practitioners — such as surgeons, ED doctors, and anesthesiologists — for which the patient can’t seek an in-network alternative. The patient will pay the in-network rate, leaving the insurance company and provider to negotiate any additional payments.


Privacy and Security

The computer systems of Newark, NJ’s police department are taken offline for four days following a ransomware attack.


Other

image

The board of Massena Memorial Hospital (NY) approves $1 million to upgrade its “ancient” Meditech system (or “metatech,” as the local paper spells it) in contracting with CloudWave for cloud-based hosting. The CEO warned the board that their current implementation runs on Windows Server 2003, which he describes as “a big garage door somebody could hack their way through and steal everything.”

image

A brilliant article in London’s “The Guardian” says unlearned movie stars should stick to pretending to be someone else on screen rather than taking positions on medical science, referencing “Vaxxed,” the new movie about Andrew Wakefield, the widely discredited anti-vaccine doctor who eventually lost his medical license. Robert DeNiro included the film in his film festival with a vague rationale that the documentary “is something people should see,” only to pull it when scientists complained. The Guardian notes:

If “Vaccinating With the Stars” looks a little inappropriate where public health is concerned, so too is the prospect of children falling ill because an actor clearly hasn’t read Wakefield’s Wikipedia entry. Unless, worse still, he has.

image

An LA Times article quotes University of Michigan’s Karandeep Singh, MD, MMSc, who says unregulated and sometimes poorly design healthcare-related apps can be “like having a really bad doctor.” It points out a recent study of Instant Blood Pressure, a $4.99 app marketed without FDA approval that correctly diagnosed hypertension only 25 percent of the time, with the company hiding behind the excuse that it isn’t intended for diagnosis and treatment, thus rendering its raison d’être questionable.

image

A New York jury awards $50 million to a woman who says she has become incontinent after her obstetrician performed an unnecessary episiotomy during the birth of her healthy child in 2008. The woman says she was forced to quit her job, has to wear panty liners, and can’t have sex with her husband. The doctor, who insists he did nothing wrong and that the woman never complained about any issues, says, “Someone can just make up a story, cry to the jury, and they will ignore all the records and give her a big award.”

Sparrow Health System (MI), bowing to pressure from the National Labor Relations Board and the state nurse’s union, rescinds its policies that prohibited employees from talking about health system policies on social media and to the press. NLRB says the health system’s policies related to social media, cell phone use, the wearing of unapproved buttons, and gossiping are overly broad and are discriminatory.

Minnesota hospitals report that their emergency departments are becoming “holding pens” for sometimes violent mental health patients, forcing other patients to wait for hours or to be sent elsewhere as up to half of their gurneys are occupied by patients who require levels of oversight and security that few hospitals can provide. One hospital psychiatrist reports, “This is supposed to be a place of peace and security. Instead, we have acute psychiatric patients banging on windows, throwing feces, and assaulting people. It’s deeply unsettling to other patients in the ER.”

In Canada, Alberta Health Services will spend $316 million over the next five years to replace 1,300 mostly non-interoperable clinical systems with a single system that can maintain a single medical record. It will issue an RFP shortly. The College of Physicians and Surgeons termed existing systems “woefully inadequate” in late 2014, with a government official adding that after spending nearly $300 million, Alberta “really got nothing more than electronic isolated file systems. Do we realize we need to have data exchange standards before we start adding systems? We need systems to talk. It blows my mind.”

image

A study of those Dyson Airblade hand dryers with which business replace paper towels (while claiming unconvincingly that their motivation is your health rather than reducing their restroom expenses) finds that they blast germs onto anyone within 10 feet of the bathroom wall, so you’d better hope the person using it washed their hands well first. Dyson disputes the study, claiming the paper towel cartel is behind it.


Sponsor Updates

  • Aprima will exhibit at the Boulder Valley Individual Practice Association meeting April 26 in Lafayette, CO.
  • Catalyze CEO Travis Good, MD will speak at the HITRUST Annual Summit April 25-28 in Grapevine, TX.
  • Besler Consulting releases a podcast on “IME Shadow Billing.”
  • Crossings Healthcare Solutions will exhibit at the Cerner RUG April 20-22 in Charlotte.
  • Cumberland Consulting Group Managing Director Tom Evegan guest blogs for Revitas.
  • EClinicalWorks will exhibit at the California MGMA 2016 Annual Conference April 22-23 in Sonoma.
  • Isthmus Magazine features Healthfinch and its data partnership with Beekeeper.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Monday Morning Update 4/18/16

April 17, 2016 News 10 Comments

Top News

image

SNAGHTML70e37673

Epic’s trade secrets lawsuit against India-based Tata Group concludes with the Wisconsin jury awarding Epic $940 million in damages. The verdict calls for Tata to pay Epic $240 million for the benefits received by its subsidiary (Tata Consultancy Services) from stealing Epic’s trade secrets plus another $700 million in punitive damages. The lawsuit said employees of Tata posed as Kaiser Permanente employees to gain access to client-only Epic documentation that Tata planned to use to develop a competing product.

image

Tata says it will appeal, claiming it did not use Epic’s information in the development of its Med Mantra system. The company says its developers never saw Epic’s materials.

image

image

The $940 million judgment will certainly be reduced by the presiding judge, who chided Epic’s damage claims before the hometown jury’s verdict was announced. He observed:

  • Epic didn’t provide the court with the method it used to calculate its damage claims until after the trial began, which could cause those claimed damages to be excluded.
  • Epic hasn’t proved that it was damaged to the extent claimed or that Tata benefited to that degree, explaining, “The complete lack of evidence tying the costs of Epic’s research and development efforts to any commensurate benefit to TCS dooms its methodology.”
  • Epic claims that the biggest benefit to Tata wasn’t stealing development secrets or source code, but rather then value of “what not to do” that is “spread throughout the enterprise.”
  • The only evidence provided of how Tata used Epic’s information was a side-by-side marketing graphic comparing Epic’s products and Tata’s Med Mantra, with the claimed damages “based on Epic’s speculation that the confidential information is sitting on a shelf somewhere to be used immediately after this trial ends.”
  • The judge says such “future use” assumptions are more appropriately addressed via injunction to prevent such use  rather than a speculative damage award. He also noted that Tata has mostly failed in its attempts to penetrate the US market and that an injunction would reduce its chances even further.

Reader Comments

image

From Verisimilitude: “Re: HealthTap access on Facebook Messenger. I’m not sure how much privacy protection people are given. I’m no HIPAA expert, but my guess is there’s a big fat release and arbitration clause buried in a EULA someplace.” Video visit vendor HealthTap offers a free chatbot Q&A service using Facebook Messenger rather than real-time access to actual human doctors. HealthTap’s terms of service are indeed voluminous and include an arbitration clause. I tried the Facebook service and it was worthless – all I received within several hours of asking a simple question was a list of previously answered similar questions (that weren’t similar at all) and a link to HealthTap’s site.

image

From Nasty Parts: “Re: NextGen. A major re-org was announced as Rusty Frantz continues the Pyxis-ization. It has dissolved its silos into ‘One NextGen,’ and as a result, multiple senior execs are transitioning out.” Unverified. Nasty Parts named several VPs who are leaving and says there’s “much more change to come.” I’m not sure that’s a bad thing. Frantz has been CEO at Quality Systems for almost a year, so he’s had time to think through what needs to be done.

image

From Maury Garner: “Re: Sandlot Solutions. You reported their closing. I ran across this lawsuit filed by one of their customers to prevent Sandlot from destroyer their data immediately after copying it for them. The article describes Sandlot Solutions as insolvent and closing.” I don’t have a Law360 subscription to see the details, but your description of their article seems accurate.

From Rebuttal: “Re: IT departments. In the last 5-6 years, I’ve noticed that organizations I’ve interviewed with seem to care more about what I can bring rather than having a balanced interest in our mutual needs. It seems that complex vendor systems have turned IT departments into sweatshops.” It may well be that the high cost of vendor systems has raised provider expectations that new hires will immediately pay off in task-specific, product-specific ways with implementation and optimization. It’s also probably true that for-profit companies in particular aren’t as interested in investing in mutually satisfying long-term relationships with new hires who might bolt once they’ve built their resumes. Lastly, I would speculate that the rise of the 1099 economy has redefined the work environment on both sides to a “what have you done for me lately” mindset. I’ll invite readers to weigh in.

image

image

From Vince Ciotti: “Re: Bill Childs. Just to make sure readers appreciate how progressive Bill and the pioneering team at Lockheed were, they also came up with:

  • CRTs (cathode ray tubes). They called them VMTs (Video Matrix Terminals) in an era when most systems relied on keypunch cards and green bar paper reports for input and output.
  • Light pens. The precursor (punny?) to today’s mice, an idea Jobs and Wozniak copied from Xerox PARC. Clinicians using MIS only had to click on the VMT screen instead of trying to learn touch typing.
  • Screen building. Lockheed (later TDS) called it matrix coding, but teams of clinicians designed their own order screens rather than implementing a model designed by programmers who never saw a patient.

Feeling nostalgic? You can read more in Vince’s HIS-tory series that ran on HIStalk for several years. I immersed myself back into them over the weekend as a guilty pleasure.

image

From Rocket J. Squirrel: “Re: Erlanger. A rocky start to the Epic project. The consultant evaluation ignored the lowest-cost option and the CTO who made the decision is gone after eight months. Totally behind on project staffing and already six months delayed.” Unverified.

From Alpha Surfer Dude: “Re: Dr. Brink’s article on radiology benefits managers. See what’s going on in Hawaii if you want to learn why this is so topical.” A Readers Write article by James A. Brink, MD, vice chair of the American College of Radiology and Mass General radiologist in chief, criticized plans to require pre-authorization of advanced imaging. He says electronic guidelines can help ensure the appropriateness of such orders in real time. Insurer Hawaii Medical Service Association (HMSA) made outpatient imaging pre-authorization mandatory in December 2015, leading doctors to complain that care is delayed and that tests are often denied. Newly proposed legislation would hold insurance companies rather than providers liable for any civil damages resulting from pre-authorization delays. HMSA requires doctors to contact Arizona-based radiology benefits management company National Imaging Associates (a subsidiary of publicly traded Magellan Health), leading one Hawaii doctor to complain, “Do you want those decisions to be made by offshore non-experts?” Taking the counterpoint, it was widespread ordering of medically questionable imaging studies – sometimes by doctors with a financial interest in the machines used to perform them — that created the need for such restrictions in the first place. As they say, one person’s excess cost is another’s livelihood.


HIStalk Announcements and Requests

image

Only 12 percent of poll respondents have had a virtual visit in the past year, although 81 percent of those who did were satisfied. New poll to your right or here: would you be worried about your privacy if you were being treated for depression by an EHR-using provider? Please explain after voting.

image image

Mrs. May, a first-year teacher from Florida, says her special education classes are using the STEM and engineering kits we provided in funding her DonorsChoose grant request not only to learn about science, but also “how important communication is to get to the finish line.”

image image

Also checking in is Mrs. Johnson from Oklahoma, who says her elementary school students “are loving the hands-on materials that you have provided for us. I no longer hear any complaints when I ask them to go to their math stations because they are not only enjoying them, but they are practicing their skills.”


Last Week’s Most Interesting News

  • CMS threatens to ban Theranos CEO Elizabeth Holmes from the blood testing business for failing to correct problems that CMS had previously called to the company’s attention.
  • Kaiser Permanente launches a database of data contributed by its members that researchers will use to study how genetic and environmental factors affect health.
  • CMS announces a five-year pilot of CPC+, a medical home model that requires the use of a certified EHR, and for one of the two tracks, a signed agreement from the practice’s EHR vendor that it will support the capabilities needed.
  • Kaiser Permanente releases a summary of what it has learned from having a large number of its patients use a portal, disclosing that one-third of its PCP encounters are now conducted by secure email with expectations that the percentage will increase significantly.

Webinars

April 26 (Tuesday) 1:00 ET. “Provider-Led Care Management: Trends and Opportunities in a Growing Market. ”Sponsored by HIStalk. Presenter: Matthew Guldin, analyst, Chilmark Research. This webinar will provide a brief overview and direction of the provider-led care management market. It will identify the types of vendors in this market, their current and longer-term challenges, product capabilities, partnership activity, and market dynamics that influence adoption. It will conclude with an overview of key factors for vendors and solutions moving forward.

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

Cardinal Health-owned NaviHealth, which offers post-acute care utilization management services, will acquire care transition software vendor Curaspan Health Group.

image

Behavioral health software vendor Quartet Health raises $40 million in a Series B funding round led by GV (the former Google Ventures), increasing its total to $47 million.


People

image

Mark Cesa, whose long healthcare IT sales career included stints with Baxter Healthcare, GTE Health Systems, Eclipsys, Tamtron, QuadraMed, Allscripts, and Napier Healthcare, died of cancer April 1. He was 61.


Announcements and Implementations

image

Voalte announces that it signed 125 hospitals in its fiscal year ending March 2016, increasing its customer base by 83 percent.

image

Imaging IT expert Herman Oosterwijk posts the Digital Imaging Adoption Model that was announced a few weeks ago by the European Society of Radiology and HIMSS Analytics.


Government and Politics

image

VA CIO LaVerne Council says in Congressional testimony that the VA needs “a new digital health platform” and seems to suggest it will pursue a custom-developed system rather than buy a commercially available product or upgrade VistA. Council says a working prototype will be available in a few months that “is aligned with the world-class technology everyone’s seen today and using in things like Facebook and Google and other capabilities. But it also is agile and it leverages what is called FHIR capability, which means we can bring things in, we can use them, we can change them, we can respond.” Lawmakers are justifiably concerned that the history of the VA specifically and government agencies in general suggests a high likelihood of expensive failure and lack of interoperability with the DoD, but Council says the cost-benefit analysis is solid. She also reiterated previous statements that the VA is putting its $624 million Epic patient scheduling system rollout on hold while it tests its own self-developed system that will cost just $6.4 million. The VA and Congress, anxious to deflect bad publicity about the VA’s wait time scandal, quickly threw IT money at the patient scheduling problem last year despite scant evidence implicating technology as the problem.

image

CMS Administrator Andy reiterates that EHR certification will require vendors to provide open APIs for interoperability.


Privacy and Security

image

The Department of Homeland Security’s US-CERT urges Windows PC users who have Apple’s QuickTime installed to de-install it immediately after a security firm finds major vulnerabilities and Apple quickly drops QuickTime for Windows support. It’s fine on Apple devices.

A federal appeals court rules that a healthcare company’s general liability insurer must defend it against security breach claims even when the policy doesn’t specifically include cyberbreach wording. .


Other

Jenn covered for me Thursday and mentioned the JAMIA-published study that found missing information about patients with diagnoses of depression or bipolar disorder, about which I will opine further. The authors try to make the case that primary care EHRs suffer from “data missingness” that indicates that “federal policies to date have tilted too far in accommodating EHR vendors’ desire for flexible, voluntary standards” that “can lock providers in to proprietary systems that cannot easily share data.” Underneath that big (and preachy) conclusion is a little study with a lot of problems:

  • It analyzed data from 2009 only, eons ago in HITECH years (in fact, that was the same year that HITECH was passed, well before it had significant EHR impact).
  • It covered patients from a single insurance plan’s patients, treated by a single medical practice, using a single EHR (Epic).
  • The “data missingness” it claims involves only two behavioral health diagnoses that were likely treated by specialty providers (LCSW, PhD, psychiatrists) who weren’t HITECH-bribed to adopt EHRs and who often don’t use them because of privacy concerns and lack of benefit.
  • The study matched EHR information to claims data in finding that 90 percent of acute psychiatric services were not captured in the EHR. The authors should have noted that many patients seeking behavioral health services pay cash to avoid creating a claims history, seek help from public services, or travel out of their own area for them to maintain privacy, all of which could impact their conclusions.
  • It’s likely that some or even most of the patients with missing information would have opted out of automatic sharing of their behavioral health information given the chance.
  • The authors blame EHR vendors for the lack of interoperability, but give the organization they studied a free ride in assuming that it freely exchanges information with any other provider who expresses interest.
  • The study seems to state an expectation that every primary care provider’s EHR have a complete patient record from all sources of care, which is a nice dream, but as they correctly conclude is not today’s reality for many reasons, most of them unrelated to EHR vendors. That doesn’t necessarily mean the information isn’t available (via an HIE, records request, patient history, etc.) but only that it isn’t updated in real time across EHRs everywhere.
  • Lack of information doesn’t necessarily change the treatment plan or outcome. Doctors have never had that information, electronic or otherwise, so it’s not like EHRs caused a new problem.
  • The best conclusion is this: if you want the most nearly complete patient information available, use both EHR information and individual patient claims data across all commercial and governmental payers and present it from within the patient’s EHR record. That’s not how the system works for most PCPs, however.

image

Kansas City tax authorities approve reimbursing Cerner for $1.75 billion of the $4.45 billion construction cost of the company’s new The Trails campus. Cerner says the new space will allow it to add 16,000 jobs within 10 years and  the increased post-construction assessment should generate $2.6 million of additional property taxes per year.

In Canada, Nova Scotia has spent $30 million on incentives for practices to use EHRs, but faxing is still the most common way for practices to communicate with each other because the government-approved systems aren’t interoperable.

image

Lee Memorial Health System (FL) comes up with creative excuses for earning a one-star quality rating from CMS: (a) the hospital converted to Epic just three years ago; (b) incomplete EHR coding caused the health system to be compared unfairly; (c) CMS doesn’t take into account tourist-driven seasonality; and (d) CMS doesn’t take socioeconomic factors into account and therefore penalizes hospitals that treat poor patients who are sicker (a minor variant of the “our patients are sicker” explanation). The hospital didn’t suggest that it will actually treat patients any differently even though its largest customer gave it the lowest possible quality score.

Weird News Andy notes that “even junkies are logical” as evidenced by this story, in which drug abusers are injecting themselves in the bathrooms and parking garages of Massachusetts General Hospital so they can get medical help quickly if they overdose. MGH says people are even tying themselves to the emergency pull cords in its bathrooms so the alarm will go off if they keel over in a narcotic stupor.


Sponsor Updates

  • A Spok case study describes the 50 percent of University of Utah Health Care’s incoming residents and medical students who choose to communicate using Spok Mobile for secure text messaging.
  • Medecision President and CEO Deborah M. Gage is named as one of the most powerful women in healthcare IT.
  • T-System will exhibit at the UCAOA National Urgent Care Convention April 17-20 in Orlando.
  • Huron Consulting Group is named by Forbes as one of America’s Best Employers for the second consecutive year.
  • Wellsoft will exhibit at TCEP Connect 2016 April 21-24 in Galveston, TX.
  • ZirMed will exhibit at the California MGMA Conference April 21-23 in Sonoma.
  • Zynx Health will exhibit at the ANIA 2016 Conference April 21-23 in San Francisco.
  • PatientPay shows commitment to rid paper from healthcare billing in support of The Nature Conservancy.
  • QPID Health CMO Mike Zalis will speak at the North Carolina Association for Healthcare Quality Annual Conference April 21-22 in Durham.
  • Huffington Post interviews Red Hat CEO Jim Whitehurst.
  • The SSI Group will exhibit at the Healthcare Finance Institute April 17-19 in Tysons Corner, VA.
  • Streamline Health will exhibit at the 2016 California MGMA Annual Conference April 21-23 in Sonoma.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

EPtalk by Dr. Jayne 4/15/16

April 15, 2016 News Comments Off on EPtalk by Dr. Jayne 4/15/16

image

In follow up to my recent discussion of faxing as a primary mechanism of data sharing, a reader sent this piece with data from a January provider survey. Traditional communication methods (letter, fax, phone) are still in use by the majority of providers. The graphic only tells part of the story, however. In order to have a better understanding of the situation, we’d need to see data from the same providers that shows what percentage of communications falls into each of the buckets. For example, 89 percent of providers are receiving using paper-based methods. Is that one letter or a hundred? The same goes for electronic exchange. Maybe only 40 percent of providers are doing it, but they’re doing it 90 percent of the time. I wanted to dig deeper into the data, but it was behind one of those “enter your email address to access this resource” pages. Those drive me crazy – it seems like it’s always a multi-step process to get the download. I’d look much more favorably on an organization that presented its content up front and asked you to sign up if you wanted to learn more, compared to organizations that require your address and then clutter your inbox.

image

Midmark’s announcement that it is acquiring RTLS vendor Versus Technology caught my attention. I’ve always been a fan of Midmark –  its sales team impresses me with their relatively-subdued, knowledge-driven approach as compared to the bluster of some of their competitors. They’ve been innovative in providing solutions that just work, which is always appreciated when you have hundreds of devices to bring online. Midmark is also interesting as a company. Starting more than 100 years ago as an industrial equipment company, they entered healthcare in the 1960s and diversified to veterinary and technology segments. It seems to be a company that works at its own pace and ignores the industry hype. We’ll have to see whether the acquisition changes that.

From Direct Doc: “Thanks for the Curbside Consult on the state of primary care training programs. What do you think about the fact that Harvard doesn’t even bother to train students in family practice?” He didn’t mention that the article he cited clarifies that it’s not just Harvard. There are actually 10 medical schools (many of which are regarded as the nation’s top schools) that don’t have a department of family medicine. Some of them do offer optional family medicine courses, but I can say from first-hand experience that it’s not the same as taking a course in a school with a full-fledged department. I was barraged with comments during my training that I was “too smart for primary care” and our administrators were saddened that my class had more students match into family med than into general surgery. They also allowed some financial aid shenanigans that actually put primary care grads at a disadvantage. Needless to say, I’m not on the alumni donation list.

image

Wearable tech vendor Ringly announced the bracelet version of its customizable notification jewelry. Their ring offering was a bit too chunky for my taste but I really like the bracelet concept. I’m not a fan of gold accessories, but I’ve been watching their products for a long time. They have a non-gold option for ring designs, and once they offer one in a bracelet, I will be sold. The idea of being able to receive notifications when messages arrive from a specific sender is an attractive one. I don’t routinely use audio notifications on my phone and turn off the notifications on Outlook and other apps, but I’d like to know if a high-priority client is trying to reach me outside of my normal email-checking periods.

Mr. H mentioned the CMS announcement regarding the Comprehensive Primary Care Plus (CPC+) initiative. It’s designed as a new medical home model that allows practices to choose one of two tracks for value-based reimbursements. One track will provide a smaller, monthly per-patient payment plus bonuses. The second provides a larger payment but has more requirements. It’s slated to run for five years and they want to include 5,000 practices. The launch is scheduled for January 2017, which doesn’t give practices much time to get their acts together unless they’re already doing a medical home model or have started the extensive change management and process work that is needed to make it viable. I have worked with a couple of practices that participated in the original Comprehensive Primary Care (CPC) program that started in 2012 and runs through the end of this year. The ones I worked with were already recognized by NCQA for their Patient Centered Medical Home efforts, and were looking for assistance with reporting and other EHR needs to meet the CPC requirements.

The key Comprehensive Primary Care Functions involved include: access and continuity; care management; comprehensiveness and coordination; patient and caregiver engagement; and planned care and population health. The higher-paying track definitely has more extensive healthcare IT requirements including the ability to manage the payments on the revenue cycle side. Although track 1 maintains regular fee-for-service payments, track 2 delivers hybrid payments with reduction in E&M payments for a percentage of claims. Bonus payments are also tiered, at $2.50 per patient per month on track 1 and $4 on track 2. Interestingly, incentives are prepaid at the beginning of a performance year, but must be refunded if the practice doesn’t meet quality and utilization performance thresholds.

Track 2 partners must submit a letter from their EHR vendor that outlines the vendor’ commitment to “supporting practices with advanced health IT capabilities.” I found it interesting that this wasn’t required for Track 1, because I’m not sure what difference it really makes. Of course vendors are going to say that they’re supportive. What else are they going to do? The devil will be in the details though, and I’d be surprised if this doesn’t lead to a host of de facto requirements that vendors may struggle to meet.

From The Ghillie: “I know that working with clients during their EHR transitions can be frustrating. You seem like an outdoorsy person, so I’d like to suggest an additional benefit to the paperless office transition.” I have to say, I’m smitten, especially since I’m a big fan of reduce/reuse/recycle. Most of my cast-off file cabinets were only two drawers, but I’m going to keep an eye out for a four-drawer on the yard sale circuit.

Do you have a novel use for cast-off equipment? Email me.

Email Dr. Jayne.

News 4/15/16

April 14, 2016 News 3 Comments

Top News

image

Yet another scathing letter from CMS to Theranos comes to light. Federal regulators propose banning company founder and CEO Elizabeth Holmes from the blood-testing business for two years after her company failed to correct serious problems discovered at its California lab. The news surfaces a week after Theranos bolstered its Scientific and Medical Advisory Board (perhaps in a last-ditch attempt to rescue what’s left of its reputation) with representatives from CDC, American Association For Clinical Chemistry, and several academic medical centers and hospitals across the country.


HIStalk Announcements and Requests

This week on HIStalk Practice: Western New York’s HealtheLink welcomes new physician practices. GA-HITEC reaches MU goals with Georgia-based physicians. HealthTap offers free consults via Facebook’s Messenger app. Spotify highlights the favorite tunes of healthcare IT legislators. ("The Ties That Bind" never seemed more apropos.) ONC highlights the successes of the REC program – in 124 pages. Buffalo Cardiology & Pulmonary Associates closes its doors after 40 years, citing a "new era of health care." Bill Moreau, MD details the impact healthcare technology will have on Team USA during the 2016 Summer Games in Rio.


Webinars

None scheduled soon. Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

Athenahealth acquires physician scheduling startup and More Disruption Please accelerator program graduate Arsenal Health (fka Smart Scheduling) for an undisclosed sum.

image

OSF Healthcare (IL) formally launches OSF Ventures, a $75 million venture fund that will invest in four to six businesses a year focused on reducing healthcare costs or improving patient experiences and outcomes. OSF clinicians will serve as willing guinea pigs for the fund’s companies, which already include Health Catalyst and Pieces Technologies.

image

GSI Healthcare relocates its headquarters to the BNY Mellon Center in Philadelphia’s City Center. The company, which offers care coordination technologies for ACOs and Medicaid Health Home programs, plans on growing its employee base by 60 percent this year, largely in technical positions like software engineering.


Sales

image

Orion Health signs contracts with two hospitals in London for its EHR and patient engagement software, and one with NHS Fife in Scotland for an integrated health and social care record for adult services.

image

MultiCare Health System (WA) expands its relationship with Health Catalyst, signing an enterprise-wide technology subscription agreement and professional services agreement. Health Catalyst will tie a portion of the professional services contract to achieving MultiCare’s annual $25 million improvement goal. The health system participated in the company’s $70 million Series E round of financing in February.


People

image

Specialists On Call names Sean Banerjee (Evolent Health) CTO and Ann Kessinger (The Advisory Board) executive vice president of sales and marketing.

image

California-based Stanford Health Care’s Board of Directors appoints David Entwistle (University of Utah Hospitals & Clinics) president and CEO.


Announcements and Implementations

Ensocare offers Dell Services customers access to its discharge management and care transition technology.

CVS MinuteClinic partners with American Well to offer its Ohio-based patients access to Cleveland Clinic physicians via a new Express Care Online program.

image

Mobile podiatry provider KG Health Partners teams with VAR ClinicAnywhere to implement HealthFusion’s MediTouch EHR and PM software for long-term care.


Technology

Navicure develops Navicure Perform, an analytics solution that helps providers identify and rectify cash-flow bottlenecks from within the company’s claims management software.

Panacea Healthcare Solutions incorporates a Web-based charge management solution from Holliday & Associates into its CDMauditing coding and compliance technology.


Government and Politics

image

California announces a $179 million settlement with Xerox stemming from a failed computer modernization of its Med-Cal claims processing system.

Louisiana’s Administration for Community Living awards nonprofit population health management company EQ Health Solutions a three-year grant to help Medicare beneficiaries recognize and prevent healthcare fraud.

Reports surface that the VA is looking to implement its own scheduling software rather than spend the $624 million promised to Lockheed Martin and Epic as part of last year’s highly sought after, seven-year-contract win. The agency is reportedly testing a homegrown solution at 10 pilot sites.


Privacy and Security

clip_image001

Intermountain Healthcare VP/CIO Marc Probst announces during a World Health Care Congress presentation that the health system will partner with the University of Utah and several other organizations to create a joint security center focused on thwarting cybersecurity attacks. Probst noted in a HIStalk interview earlier this year that security would be top of mind for him while strolling the show floor at HIMSS. You can read the interview here.


Innovation and Research

image

A study published in Nature describes a neuroprosthetic breakthrough called electronic “neural bypass” that has restored a quadriplegic man’s ability to move his hand.

image

A JAMIA study comparing patient data recorded in a typical EHR with corresponding data from insurance claims finds the EHR data to be fragmented and incomplete a majority of the time. Researchers looked specifically at mental healthcare and found outpatient care records for patients with bipolar disorder and depression missing an average of 57 percent of the time, and record of acute psychiatric services missing 89 percent of the time. The findings prompted researchers to suggest that “priorities for further investment in health IT will need thoughtful consideration.”

A survey of 82 health system executives shows that healthcare IT is still a top area for capital spend, and the need for interoperability is greater than ever. Nearly 70 percent of respondents feel their organizations successfully access ambulatory data from employed physician networks, while just 38 percent feel as successful with affiliated or non-affiliated networks.


Other

image

NY Jets wide receiver Brandon Marshall visits Silicon Valley to test the tech waters for the mental healthcare nonprofit he co-founded with his wife, Michi. Project 375 has partnered with Chicago Public Schools to offer behavioral health services to students, and has committed to investing $1 million to McLean Hospital, where Marshall received treatment for borderline personality disorder. He sees great potential in artificial intelligence like X2AI’s Tess bot and the impact it could have on psychotherapy.


Sponsor Updates

  • The Black Book 2016 Research Report recognizes Medicity as the top vendor in public/government and agency HIE systems.
  • The local paper highlights the success UK Healthcare (KY) has had with GetWellNetwork’s patient engagement technology.
  • Health Catalyst receives the 2016 Gallup Great Workplace Award.
  • Iatric Systems will exhibit at the HCCA 2016 Compliance Institute April 17-20 in Las Vegas.
  • Influence Health will host its Influence Client Congress April 24-27 in Phoenix.
  • InterSystems will exhibit at the Healthcare Payers Transformation Assembly April 19-21 in Houston.
  • Intelligent Medical Objects and Navicure will exhibit at the EClinicalWorks 2016 Enterprise Summit April 19-21 in Boston.
  • PDR will exhibit at Direct to Consumer National April 19-21 in Boston.
  • LifePoint Informatics releases a white paper, “Why Access to Lab & Diagnostic Data is Important to Providers, Payers and Patients.”
  • LiveProcess will exhibit at the 2016 Preparedness Summit April 19-22 in Dallas.
  • Netsmart will exhibit at the New York State Public Health Association annual conference April 21 in Cooperstown.
  • Nordic posts a new video, “Large EHR Implementations: Two critical success factors.”
  • Obix Perinatal Data System will exhibit at the AWHONN Virginia Conference April 23 in Virginia Beach.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Morning Headlines 4/14/16

April 13, 2016 News Comments Off on Morning Headlines 4/14/16

Intermountain, U. Utah to open cybersecurity center with 3 others

Intermountain Healthcare will partner with the University of Utah and several other organizations to create a joint security center focused on thwarting cybersecurity attacks.

Regulators Propose Banning Theranos Founder Elizabeth Holmes for at Least Two Years

Federal regulators have proposed banning Elizabeth Holmes from the blood-testing business for two years after her company failed to correct serious problems discovered at its California lab.

Restoring cortical control of functional movement in a human with quadriplegia

A study published in Nature describes a neuroprosthetic breakthrough called electronic “neural bypass” that has restored a quadriplegic man’s ability to move his hand.

State Junks $179 Million Medi-Cal IT System, Will Start From Scratch

California announces a $179 million settlement with Xerox stemming from a failed computer modernization of its Med-Cal claims processing system.

Morning Headlines 4/13/16

April 12, 2016 News Comments Off on Morning Headlines 4/13/16

Vermont first to coordinate health care delivery with disruptive information sharing technology

Vermont will implement PatientPing state-wide, a care coordination service that alerts providers when their patient is being treated at any other facility in the state.

Kaiser Permanente launches ‘research bank’

Kaiser Permanente has launched a new research tool that will allow its 675,000 members to submit their genetic, environmental, and general health data to a database that will be used by researchers to study how genetic and environmental factors affect health.

Lawsuit: TGH nurses told woman’s family that she is HIV positive

A woman is suing Tampa General Hospital (FL) after a nurse inadvertently disclosed her HIV status in front of family members. The nurse was coordinating with transplant team personnel over a Vocera speakerphone.

GE Ventures and Mayo Clinic Launch Company to Scale and Digitize Cell and Gene Therapies

GE Ventures and Mayo Clinic launch Vitruvian Networks, a company that will market software and manufacturing services to cell and gene therapy producers.

News 4/13/16

April 12, 2016 News 8 Comments

Top News

image

CMS announces a five-year, 5,000-practice test of Comprehensive Primary Care Plus (CPC+), a new medical home model that moves payments further away from fee-for-service. Eligible practices can apply to participate in one of two tracks, both of which require use of a certified EHR.

Track 1 practices will be paid $15 per month per Medicare patient plus performance-based incentives in return for providing 24/7 patient access and supporting quality improvement activities. Track 2 practices will be paid $28 per Medicare patient plus performance-based incentives and must also follow up after ED or inpatient discharge, connect patients to community resources, and have their EHR vendor sign an agreement that “reiterates their willingness to work together with CPC+ practice participants to develop the required health IT capabilities.”

CPC+ will begin in January 2017. 


Reader Comments

image

From Bob: “Re: Meditab. Any news? Emails are bouncing and phone numbers are disconnected.” I’ve barely heard of the ambulatory EHR vendor, so I don’t have a lot of interest or knowledge about whether they are defunct or not. I tried to contact sales and got into an endless PBX loop.

From Lance Carbuncle: “Re: Vocera. Lawsuits are flying after an infringement on the privacy (and dignity) of a patient. A mother whose baby passed away was subjected to an open communication between the transplant team and the nurse wearing her Vocera badge. Then the worst part was the care team disclosed that the mother has HIV to the family over a ‘speakerphone’ Vocera badge.” Unverified. A patient sues Tampa General Hospital (FL) for disclosing HIV test results without authorization, claiming that a nurse spoke to the transplant team on speakerphone. The hospital has announced its intention to replace Vocera with Voalte.

image

From Portobello: “Re: Arkansas Children’s Hospital. Is walking away from its Meditech 6.1 implementation for Epic. I am wondering if the hospital is being acquired by a larger health system and it just hasn’t been announced yet or if the ambulatory product was so poorly implemented that it pushed them away.” Sources tell me the hospital is not happy with Meditech’s new ambulatory system, to the point they had to halt its rollout. Ambulatory has been the Achilles heel of Meditech and lack of a competitive offering is further marginalizing company as the choice of small hospitals that would rather have Epic or Cerner but can’t afford them. It’s a shame because we really could use more inpatient EHR competition. Meditech’s executives and directors average 65 and 77 years of age, respectively, and while I admire that the company has rigidly stuck to its knitting for 50 years, sometimes it feels like the rich, Boston-society guys in charge are no longer fully engaged enough to successfully run a technology company in the face of better competition than they had in 1990. It would have been interesting if Athenahealth had bought Meditech in its effort to penetrate the inpatient market, but that would have probably been a $1 billion acquisition loaded with legacy baggage and a customer base of small hospitals that are being bought out by larger health systems who want everybody running the same system.

image

image

image

From Diametric: “Re: Bill Childs. He published this document in April 1968 when he was at Lockheed. I’ve always kept this document to remind me what’s important. While the technology has changed, I think this can still serve as a supplemental guide for rational development. I have interacted with perhaps 200 vendors over the years and found those that held close to this philosophy made the best partners.” I set up the document for downloading here. It’s a remarkable manifesto written nearly 50 years ago that spells out the still-valid requirements for hospital clinical systems. Bill started at Lockheed doing missile programming, then in 1968 moved over to the company’s new project of building a hospital information system. He later joined Technicon Data Systems. Not only was he a healthcare IT technology pioneer, he then started what became Healthcare Informatics magazine and ran that from 1980 to 1995 before getting back into the vendor world. Somehow he hasn’t yet won the HIStalk Lifetime Achievement Award despite being amply qualified. Thanks for sending over the document – it made my day.


HIStalk Announcements and Requests

image 

I uncharacteristically funded a non-STEM DonorsChoose project from Ms. A from Texas, whose grant request asked for two trumpets for her music classes that are creating the area’s first school band. She reports, “While many of our scholars have very little material possessions, I truly believe we are providing them with something that cannot be purchased with money. We are offering them something that goes beyond what they can buy, which is confidence, creativity, and self-expression.”


Webinars

None scheduled soon. Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

GE Ventures and Mayo Clinic create Vitruvian Networks, which will offer software and manufacturing capabilities to support personalized medicine in the treatment of cancer, specifically those blood diseases that can be treated by reengineering the patient’s own blood cells.

image

Diabetes management software vendor Livongo Health, founded by former Allscripts CEO Glen Tullman, raises $44.5 million in a Series C round, increasing its total to $77.5 million. 


Sales

North Memorial Health Care (MN) goes live on the VitraView enterprise image viewer from Vital Images. 

image

Tift Regional Health System (GA) chooses Cerner’s clinical and financial systems.

image

University of Kansas Hospital (KS) will replace Cisco phones and Vocera voice badges with Voalte’s clinical communication and alert notification system.

image

The State of Vermont will offer PatientPing to all state providers to give them real-time alerts when their patient is being seen by another provider.


People

image

Susan Pouzar (Versus Technology) joins H.I. S. Professionals as SVP of sales and marketing.

image

NIH hires Eric Dishman (Intel) as director of its Precision Medicine Initiative Cohort Program.

image

Adrienne Edens (Sutter Health) joins CHIME as VP of education services.

image

Forward Health Group hires Subbu Ravi (Amphion Medical Solutions) as COO.

image

Streamline Health Solutions names Shaun Priest (Influence Health) as SVP/chief growth officer.

image

GetWellNetwork hires Scott Filion (Digital Health Innovations) to the newly created role of president.


Announcements and Implementations

Kaiser Permanente launches Research Bank, where volunteer KP members will contribute their genetic information as well as behavioral and environmental factors to allow researchers to study their effect on health. 

Presbyterian Homes of Georgia (GA) goes live with the HCS Interactant EHR.

Logicalis will offer its healthcare clients single sign-on and biometric ID solutions from HealthCast Solutions to support e-prescribing.


Technology

Boston Children’s Hospital (MA) launches cloud-based parent education for Alexa-powered devices such as Amazon Echo. KidsMD will be packaged as an Alexa “skill” that can be enabled by saying phrases such as, “Alexa, ask KidsMD about fever.”


Other

A former Michigan house majority whip who is also a physician is charged with healthcare fraud for providing nerve blocks for patients he hadn’t examined, then billing for his services although nurse practitioners staffed his clinics. Paul DeWeese is accused of storing his signature electronically in the EHR and then giving employees his login credentials to falsely indicate that he had met the insurance company’s requirement of reviewing the clinical documentation before being paid. He lost his medical license last summer for writing narcotics prescriptions for patients he hadn’t examined.

Former University of Missouri Chancellor R. Bowen Loftin, forced out of his job and into a newly created position with the joint MU-Cerner project called Tiger Institute for Health Innovation, never took the promised job after Cerner complained that the university didn’t consult them before announcing it. 


Sponsor Updates

  • PatientKeeper will exhibit at the 2016 International MUSE Conference in Orlando, May 31-June 3.
  • AirStrip will exhibit at the Regional CEO Forum April 13-15 in Chicago.
  • Frost & Sullivan recognizes Bernoulli with the 2016 North American Frost & Sullivan Award for Product Leadership.
  • PatientPay will plant a tree through The Nature Conservancy for every patient payment the company receives on Earth Day, April 22.
  • Besler Consulting is named a finalist in several B2B Marketer Awards categories.
  • CapsuleTech will exhibit at the 2016 American Nursing Informatics Association Conference April 21-23 in San Francisco.
  • CoverMyMeds will exhibit at the North Carolina HIMSS Annual Conference April 20-21 in Raleigh.
  • Direct Consulting Associates will exhibit at the Health IT Summit April 19-20 in Cleveland.
  • EClinicalWorks joins the National Patient Safety Foundation’s Patient Safety Coalition.
  • Form Fast, Health Data Specialists and Healthwise will exhibit at the Cerner Southeast Regional User Group Meeting April 20-22 in Charlotte, NC.
  • Galen Healthcare Solutions wins the #HITMC 2016 Best Content Marketing Award.
  • Healthfinch CEO Jonathan Baran will serve as a judge during Madison Startup Weekend April 22 in Wisconsin.

Blog Posts

Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Monday Morning Update 4/11/16

April 10, 2016 News 6 Comments

Top News

 image

Dell’s security business finds that the going rate for hiring a hacker to penetrate Gmail, Hotmail, or Yahoo email accounts is $129, while breaching a corporate email account runs $500. They will hack into a Facebook or Twitter account for $129, provide a complete US identity (driver’s license, Social Security Card, and utility bill) for $90, or provide a Visa or MasterCard for $7. They’ll even turn over a US bank account with a $1,000 balance for just $40.

image

The enterprise price list is even more sobering – hackers will launch a denial-of-service attack for as little as $5 or will install a remote access Trojan for $5 to $10. Security sites have noted that hackers are selling Ransomware as a Service for $50 plus a 10 percent commission on the ransom money paid, allowing non-technical criminals to easily and immediately launch their own extortion business.


Reader Comments

From Twidiots: “Re: [publication name omitted]. Stole your story about the DoD’s EHR project name without giving credit. I’m going to email them.” It’s common for sites to miss subtle but significant news items until they read about them on HIStalk, but it’s obvious this time because I ran the Tuesday evening announcement in my Thursday night news and suddenly everybody’s running it first thing Friday, pretending they found the days-old announcement themselves. That’s OK, but it’s still lazy to reword the DoD’s announcement without linking to it and to cite the published quotes as “US Department of Defense officials said” like some general called them up with a scoop. I guess they get lots of readers, just like those clueless “9 things you need to know” sites that rarely contain anything you might actually need to know. I think HIStalk readers are smarter than that, so there’s no need to email the publication.

image

From Vince Ciotti: “Re: Leapfrog’s tests that showed CPOE systems missed 39 percent of harmful drug orders and 13 percent of potentially fatal ones. That means they flag 61 percent and 87 percent, respectively – great progress since paper charts caught none of them!” Leapfrog took a measured approach in describing its findings as it does every year during Medication Safety Awareness Week, noting that CPOE warnings are doing a pretty good job. It’s nice that we’ve moved from questioning whether such warnings work at all to urging that it work 100 percent of the time.

From boyfrommer: “Re: Decision Resources Group. CEO Jim Lang quit and will be replaced with Jon Sandler of IndUS Group, the private equity arm of the group that purchased (and overpaid for) DRG in 2012. Jon has no operating experience and neither does his COO, who also comes from IndUS.” I’ve never heard of the company, which appears to provide medically related research reports.

From The PACS Designer: “Re: ICD-10-PCS. It’s an exciting time for healthcare as the ICD-10-PCS Procedure Codes will be updated with 3,651 additions by CMS to further enhance it starting October 1. Here’s a sample: 0273356 Dilate 4+ Cor Art, Bifurc, w 2 Drug-elut, Perc (abbreviated version) or Dilation of Coronary Artery, Four or More Arteries, Bifurcation, with Two Drug-eluting Intraluminal Devices, Percutaneous Approach.”


HIStalk Announcements and Requests

image

Poll respondents would fell safest having their medical information in the hands of Apple and an EHR vendor, placing the least trust with Microsoft and an HIE. My suspicion is that the spate of health system breaches of many kinds has cause people in general (and healthcare IT people in particular) to lose faith that their information will remain confidential. New poll to your right or here: have you had a virtual visit in the past 12 months?

image image

Ms. Chestnut from Indiana says her fourth graders are becoming better world citizens by studying the library of nearly 100 books we provided in funding her DonorsChoose grant request.

image image

Also checking in is Mrs. P from Virginia, who says she has “been laminating like a mad woman and our new printer is SO FAST” in describing some of the supplies that we provided, from which her elementary school students are creating their own math and reading games that they play independently.

Listening: The Raconteurs, the possibly defunct Detroit-Nashville supergroup foursome that includes Jack White, formerly of The White Stripes. It’s catchy, has big horns, and pushes into acid rock/Led Zeppelin in its experimentation. That sent me back (as happens frequently) to one the greatest (and most intelligent) live rock and roll bands in the world, Sweden’s Howlin’ Pelle Almqvist and The Hives.


Last Week’s Most Interesting News

  • The Department of Defense gives its Cerner project the name MHS Genesis.
  • MedStar Health (MD) disputes reports that its ransomware attack was made possible by unpatched server software.
  • HHS asks for suggestions for interoperability measures that it should incorporate into MACRA objectives.
  • Massachusetts General Hospital (MA) and two hospitals of NYC Health + Hospitals go live on Epic.
  • At least two more hospitals are taken offline by ransomware attacks, this time in California and Indiana.

Webinars

One of the best (and most timely) webinars we’ve done was last week’s “Ransomware in Healthcare: Tactics, Techniques, and Response” by Sensato CEO John Gomez. We had a big, engaged crowd that asked John so many questions that we didn’t have time to address them all in our scheduled one hour. It’s worth watching — we asked John to put this together purely as a public service, so there’s zero pitch or commercial influence involved.

None scheduled soon. Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

Medical equipment and workflow vendor Midmark Corporation will acquire RTLS vendor Versus Technology to enhance its clinical workflow offerings.

Asset, facilities, and real estate management software vendor Accruent acquires Mainspring Healthcare Solutions, which offers equipment maintenance and asset management systems.

Oncology EHR vendor Flatiron Health announces strategic partnerships with its drug company customers Celgene and Amgen, both of which participated in the company’s $175 million funding round in January 2016.


People

image

St. Peter’s Health Partners (NY) promotes interim VP/CIO Chuck Fennell to the permanent position.


Announcements and Implementations

IBM and drug company Pfizer will collaborate to remotely monitoring sensor data from people with Parkinson’s disease to look for new diagnostic and treatment insights.


Privacy and Security

Einstein Healthcare Network (PA) notifies 3,000 people who filled out a web form requesting information that their entries were exposed when the form’s underlying database was inadvertently opened up to the Internet.

Target says in a securities filing that it has spent $300 million cleaning up the mess from its 2013 data breach, of which it expects only $90 million to be covered by cyberinsurance.

Adobe urges computer users to upgrade to the latest level of Flash released last week after finding flaws that allow delivery of ransomware. Steve Jobs was right when he said in 2010, “Symantec recently highlighted Flash for having one of the worst security records in 2009. We also know first hand that Flash is the number one reason Macs crash. We have been working with Adobe to fix these problems, but they have persisted for several years now. We don’t want to reduce the reliability and security of our iPhones, iPods, and iPads by adding Flash.”


Other

Want to make it obvious you don’t really know healthcare IT? Refer to inpatient drug “orders” as “prescriptions.”

image

Wired profiles artificial intelligence technology vendor Sentient Technologies, which has raised $143 million in funding since 2008 to create financial applications. The company is developing an “AI nurse” that can predict patient condition changes. The co-founder describes how such a system can teach humans:

One of the good things about evolutionary AI is that — if you know how to read it — you can actually see the rule sets. In the case of traders or of AI nurses (on which we are working, too), they are fairly complex beings. A trader may have up to 128 rules, each with up to 64 conditions. Same thing for an AI nurse. So, they are pretty complex systems and the interplay among these rules is not always linear. But if you spend some time on it, you can still understand what this thing is doing, because it’s declaratory — it says what it is doing, in other words. So we can certainly take this and learn from this what works and what doesn’t work when it comes to solving a certain problem. AI can teach people to make better decisions.

image

Authors from Kaiser Permanente describe what the organization has learned from having many of its patients use its patient portal over several years.

  • Seventy percent of KP’s eligible adult patients, 5.2 million people, have registered to use its Epic MyChart-powered portal called My Health Manager.
  • KP providers and patients exchanged 23 million secure emails in 2015, representing one-third of all PCP encounters in the first half of 2015.
  • Use of secure email was associated with a 2 to 6.5 percent improvement in HEDIS measures and a 90 percent approval rate by users with chronic conditions.
  • My Health Manager users are 2.6 times more likely to remain KP members.
  • KP is studying the disparities introduced by e-health technologies after its studies found that a disproportionate number of users are white, older, and better educated.

Weird News Andy says he’s a sucker for stories like this. Wichita, KS police arrest a 36-year-old man for child abuse after the two-year-old son of his 21-year-old girlfriend is brought to the ED not breathing due to a two-inch dead octopus blocking his throat. The boyfriend claims the child swallowed the octopus while the mother was at work. Police say it wasn’t a pet – it was intended for sushi. The child is OK.


Sponsor Updates

  • DrFirstwill exhibitat the 2016 International MUSE Conference May 31 – June 3 in Orlando, FL.
  • T-System will exhibit at the UCAOA National Urgent Care Convention April 17-20 in Orlando.
  • TierPoint will host a seminar on Emerging Threats & Strategies for Defense April 13 in Liberty Lake, WA.
  • TransUnion CMO Julie Springer is inducted into Direct Marketing’s 2016 Marketing Hall of Femme.
  • Valence Health will exhibit at the First Illinois HFMA Spring Symposium April 11-12 in Chicago.
  • Visage Imaging will exhibit at the 2016 Spring Radiology & Imaging Conference April 13-15 in Atlanta.
  • VitalWare will exhibit at the 2016 Vizient Supplier Summit April 11-13 in Las Vegas.
  • Huron Consulting Group will exhibit at the 2016 AAPL Annual Meeting and Spring Institute April 11-17 in Washington, DC. 
  • West Corp. will exhibit at the World Health Care Congress April 10-13 in Washington, DC.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

News 4/8/16

April 7, 2016 News 9 Comments

Top News

image

The Department of Defense christens its Cerner-centered EHR project as MHS Genesis. The functional project champion explains, “We want people to know MHS Genesis is a safe, secure, accessible record for patients and healthcare professionals that is easily transferred to external providers, including major medical systems and Department of Veterans Affairs hospitals and clinics. When our beneficiaries see this logo or hear the name, they’ll know their records will be seamlessly and efficiently shared with their chosen care provider.”

image image

I might quibble that the DoD’s new logo incorrectly contains all capital letters in spelling GENESIS and looks like something a Photoshop newbie might design, but at least it uses the correct Greek mythology symbol of the wingless Staff of Asclepius – which denotes healing and medicine –rather than the oft-mistaken winged Staff of Caduceus, which is symbol of commerce. Still, I  can understand how the latter is more appropriate than the former in our convoluted healthcare system, where the lines at the financial trough are often serpentine.


Reader Comments

image

From ZenMaster: “Re: Sandlot Solutions. Website down. Phone not working. Clients frantic. A cautionary tale for all the start up Population Health Analytics companies out there. HIE / Healthcare Data Aggregation / Population Analytics is hard. Proceed with caution.”

image

From A Vendor That Also Finds Email Tracking Slimy: “Re: vendors being informed when you open their spam email and then contacting you directly. Most of these programs function by embedding a one-pixel image into emails and tracking when that image is loaded. Disable the automatic download of images in your mailbox settings or contact your organization’s IT team about blocking or filtering items that are created using similar methods like Tout, Sidekick, Yesware, Streak, etc.” Promos for the Yesware tracker shows why aggressive companies keep using it for “prescriptive analytics” to pester prospects – unfortunately, it works, just like other sales techniques that range from cold calling to outright lying.


HIStalk Announcements and Requests

image

We funded the DonorsChoose grant request of Ms. S in Texas, who asked for five animation studio kits for her elementary school class to produce STEM-related movies.

image image

Also checking in is Mrs. S from Connecticut, whose middle schoolers are using the Chromebooks we provided to publish and discuss their writing, with some of the most active participants being those students who don’t otherwise engage.

image

Speaking of Chromebooks, I decided to round out my little technology arsenal of everything I use to research and write HIStalk (a $300 Toshiba laptop and a $200 iPad Mini) with a Chromebook. The Asus C201 has an 11.6-inch monitor (perfect for traveling), 4 GB of memory, a 16 GB solid state drive, a very nice Chiclet keyboard (I’m not a fan of on-screen and tiny Bluetooth keyboards), and a battery life of around 10-12 hours. It weighs about 2 pounds and is 0.7 inches thick. It powers on and off almost instantly and took almost no time to set up, automatically updating itself as needed in the background with no third-party antivirus needed. The learning curve is pretty much zero – the only workaround I had to look up was how to regain Delete-key function since that key is omitted from most Chromebooks for space reasons. Best of all, it was only $200 complete with a nice padded sleeve and a wireless mouse with nano receiver. Chromebooks use the Chrome OS operating system instead of Windows or Linux, so they won’t run most desktop apps, but the Chrome browser is very fast (as are Google Docs and Gmail), Dropbox works fine, and thankfully my most valuable program LastPass works great on it for automatically logging me in password-protected sites I’ve saved, like Amazon. I even installed the Chrome OS version of Teamviewer in case I need to remote back into the laptop to do something. It’s not for everyone – for example, folks who rely on desktop versions of Office – but you might be surprised at how much of your work is online once you think about it and this is an inexpensive, lightweight, headache-free alternative to Windows or Apple laptops. 

This week on HIStalk Practice: KAI Innovations acquires Trimara Corp. Family physician Kim Howerton, MD stumps for direct primary care in Tennessee. DuPage Medical Group expands relationship with PinpointCare. Cable and home security business Connect Your Home gets into the telemedicine business. Culbert Healthcare Solutions VP Johanna Epstein offers advice on improving patient access (and ROI to boot). Kaiser Permanente Northwest puts medical record access at patient fingertips. Tribeca Pediatrics founder details the drastic steps he took to revitalize his failing practice. Biotricity CEO Waqaas Al-Siddiq offers his take on what’s holding physicians back from making the wearables leap.


Webinars

April 8 (Friday) 1:00 ET. “Ransomware in Healthcare: Tactics, Techniques, and Response.” Sponsored by HIStalk. Presenter: John Gomez, CEO, Sensato. Ransomware continues to be an effective attack against healthcare infrastructure, with the clear ability to disrupt operations and impact patient care. This webinar will provide an inside look at how attackers use ransomware; why it so effective; and recommendations for mitigation.

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

Andover, MA-based National Decision Support Company opens a research and development headquarters in Madison, WI.

image

Population health management systems vendor Lightbeam Health Solutions acquires Browsersoft, which offers an HIE solution built with open source tools.

image

Digital check-in vendor CrossChx raises its second $15 million round in two years, increasing its total to $35 million.


Sales

image

Tampa General Hospital (FL) will implement the Voalte Platform for caregiver communication.

Universal Health Services will replace the former Siemens Invision revenue cycle solution with Cerner’s revenue cycle solution, integrating with UHS’s existing Millennium products. For-profit hospital management company UHS operates 25 hospitals.

The Department of Defense awards a five-year, $139 million contract to McKesson’s RelayHealth for patient engagement and messaging solutions. I assume that’s an extension or expansion since the military was already using RelayHealth.

Ernest Health (NM) will expand its use of NTT Data’s Optimum Clinicals suite in four facilities. The organization uses Optimum RCM in its 25 locations.

image

Queensland, Australia’s Metro North chooses the referrals management system of Orion Health.


People

image

Influence Health names Michael Nolte (MedAssets) as CEO. He replaces Peter Kuhn, who remains as president, chief customer officer, and board member.


Announcements and Implementations

image

Franciscan Alliance (IN) uses InterSystems HealthShare to create a vital signs viewer for legacy data that can be accessed from inside Epic by its 140-physician group.

image

India-based doctor finding and appointment scheduling app vendor Practo begins answering medical questions from India, the Philippines, and Singapore at no charge via Twitter using the @AskPracto account.


Government and Politics

image

National Coordinator Karen DeSalvo, MD, MPH says of information blocking in a Wall Street Journal interview, “We don’t have all the authority we need to really be able to dig into the blocking effort. We have put forward a proposal to Congress asking for more opportunities to address the issue.” She says that it’s a big step that the major inpatient EHR vendors have pledged to not participate in information blocking vs. a year ago when “people said blocking is a unicorn and not happening.” She adds consumers are interested in third-party apps that can extract data from elsewhere to create their own longitudinal health record and says that person-centric medical records will shift “very deliberately away from the electronic health record as being the source or center of the health IT universe.”

image

HHS asks for ideas about how to measure interoperability within MACRA objectives, with responses due June 3. The most interesting part of the information published in the Federal Register is that ONC is considering analyzing the audit logs of EHR users to determine how often they exchange information.

AMIA says proposed HHS changes that would give drug and alcohol abuse patients more control over their medical records aren’t adequate and fail to address electronic information exchange. AMIA wants HHS to revisit the idea of giving patients granular sharing control over their entire medical record, saying that managing substance abuse data differently is “a dated concept and flawed approach.” Doug Fridsma, MD, PhD, AMIA president and CEO, said in a statement, “Clearly, the trend in healthcare is to make patients first-order participants in their care. This means giving them complete access to their own medical records, and it should mean giving them complete control over who sees their medical information.”


Privacy and Security

MedStar Health (MD) disputes earlier Associate Press reports indicating that an unpatched JBoss server allowed hackers to take its systems down with ransomware. MedStar says Symantec, which it hired to investigate the attack, has ruled out unapplied 2007 and 2010 JBoss patches as the problem. The AP stands by its earlier report and adds that experts say that the Samsam ransomware that infected MedStar can be prevented by keeping updates current.

Google’s Verily Life Sciences biotechnology company comes under fire for awarding a research contract to a company its own CEO owns and for failing to tell its Baseline health study volunteers that it is planning to sell their data to drug companies for a profit.

image

Metropolitan Jewish Health System (NY) announces that an employee of one of its participating agencies responded to a phishing email in January 2016, with the unidentified hacker gaining access to the email account that contained PHI.


Other

Leapfrog Group  finds that CPOE systems still miss a significant number of drug ordering errors, failing to warn the prescriber of potentially harmful orders 39 percent of the time and also missing 13 percent of potentially fatal orders. Leapfrog collects voluntary CPOE test results from hospitals that use its testing tool.

The AMA publicly supports AllTrials, a global campaign that calls for every past and present clinical trial to be registered with their methods and summary results reported. The campaign says it’s not fair to study participants to hide study results that are inconclusive or unfavorable to the sponsoring organization, such as a drug company buying a study that finds one of its products ineffective. Commendably, the AMA’s involvement came from a proposal from its Medical Student Section. 

image

The COO of BCBS of North Carolina, promoted from CIO four years ago, resigns abruptly after the botched rollout of a billing and enrollment system last November during Healthcare.gov’s open enrollment period. The company is scrambling to rewrite the system in time the next open enrollment that starts November 1. It found an unspecified “fatal problem” in its software before last year’s open enrollment began, but continued anyway thinking it could fix problems as they arose, causing 147,000 customer calls on November 1 alone and 500,000 in the first week. The company imposed emergency measures in January 2016 after projecting that it will lose $400 million in North Carolina Healthcare.gov business, turning off the ability for consumers to apply online since they had no way to determine whether the applicant was actually eligible to purchase insurance.

image

The always-hustling Newt Gingrich pens an editorial criticizing his home state of Georgia for proposing to outlaw people doing their own eyeglass exams at home via a company’s app. USA Today got the assurance of Newt’s people that he had no financial interest in any related firms before running his op-ed piece, only to find out afterward that he’s running a $100 million tech fund with a private equity firm.

image

I missed a great April Fool’s prank by MedData, who announced the April 1 hiring of Hayden Siddhartha "Sidd" Finch as chief experience officer, slyly referencing a 1985 George Plimpton April’s Fool fake story in Sports Illustrated involving a Tibetan pitcher with a 168 mph fastball. The brilliant Plimpton even led off the 1985 story with a clever clue in spelling out “Happy April Fool’s Day” with the first letters of each word in the opening sentence, but still duped a significant number of people who should have known better (including a Senator, reporters, and Mets fans looking for hope).

An article questions whether it’s OK for sexting-comfortable teens to send genitalia photos to their doctors for diagnosis, wondering whether those images should be sent securely or whether the doctor receiving them might even be charged with possessing child pornography.

image

A woman who recorded her hernia operation with a hidden recorder captures OR staff making fun of her belly button and calling her “Precious” from the movie about an overweight teen. Harris Health System (TX) declined to comment citing HIPAA, but told the woman they had reminded OR staff to watch their comments and that was enough. She says she was racially profiled and is considering suing.

A primary care physician at Massachusetts General Hospital (MA) says the lack of patient narrative in EHRs dehumanizes patients and hampers the diagnostic abilities of physicians, noting that the story of Cinderella, if entered into the hospital’s newly implemented Epic system, would be a problem list consisting of “Poverty, Soot Inhalation, Overwork, and Lost Slipper.” She describes Epic (and thus EHRs in general) as:

Epic features lists of diagnoses and template-generated descriptions of symptoms and physical examination findings. But it provides little sense of how one event led to the next, how one symptom relates to another, the emotional context in which the symptoms or events occurred, or the thought process of the physician trying to pull together individual strands of data into a coherent narrative. Epic is not well-suited to communicating a patient’s complex experience or a physician’s interpretation of that experience as it evolves over time, which is to say: Epic is not built to tell a story.

A Boston Globe article ponders why the medical schools of Harvard and nine of its prestigious peers like Yale, Johns Hopkins, and Columbia don’t have a department of family medicine. Harvard blames lack of costly participation by its affiliate hospitals to support a residency. However, a Harvard medical student says doctors specializing in internal medicine and pediatrics often bolt for more lucrative subspecialties while most family medicine practitioners remain in primary care, adding that Harvard Med thinks, “You’re less competitive or you’re less rigorous if you’re interested in primary care.” Ironically, Harvard launched one of the first family practice residencies in 1965, but the federal government ended its funding 10 years later due to poor quality. The chair of the recently created family medicine program at Icahn School of Medicine says bluntly, “It’s bizarre to me that you have these institutions that don’t really feel that there’s a requirement to introduce their students to the second-largest specialty in the United States.”

The department of physical and occupational therapy at Massachusetts General Hospital (MA) create a video just before its April 2 go-live with Epic.


Sponsor Updates

  • CloudWave joins the Microsoft Cloud Solution Provider program.
  • Experian Health will exhibit at the SE Managed Care Conference April 7-8 in Charleston, SC.
  • PeriGen publishes its annual review of labor and delivery malpractice awards.
  • Red Hat announces the winners of its 2015 North American Partner Award Winners.
  • The SSI Group will exhibit at the Texas Ambulatory Surgery Center Society 2016 Annual Conference April 7-8 in San Antonio.
  • Streamline Health will exhibit at the 2016 HASC Annual Meeting April 13-15 in Dana Point, CA.
  • Surescripts announces its 2015 White Coat of Quality Award winners for excellence in e-prescribing quality.
  • Iatric Systems will exhibit at the Hospital & Healthcare IT Reverse Expo April 13-15 in Atlanta.
  • RTLS technology from Versus earns Cisco Compatible Extensions certification.
  • A record number of attendees gather at InstaMed’s annual user conference.
  • InterSystems will host its annual Global Summit April 10-12 in Phoenix.
  • Intelligent Medical Objects will exhibit at HealthCon2016 April 10-13 in Lake Buena Vista, FL.
  • Netsmart will exhibit at the Texas Public Health Association Conference April 11 in Galveston.
  • Obix Perinatal Data System will exhibit at the SSMHealth Annual Perinatal Nursing Conference April 14 in Fenton, MO.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Morning Headlines 4/6/16

April 5, 2016 News Comments Off on Morning Headlines 4/6/16

Variation in Quality of Urgent Health Care Provided During Commercial Virtual Visits

A study published in JAMA finds significant clinical variation among care delivered by commercial telehealth vendors. Researchers suggest vendors begin developing industry best practices aimed at standardizing care.

Mass. General launches Epic health records upgrade

Massachusetts General Hospital, Massachusetts Eye and Ear, and Newton-Wellesley Hospital all go live on Epic over the weekend as part of Partners Healthcare’s $1.2 billion Epic implementation.

Hackers Broke Into Hospitals Despite Software Flaw Warnings

The Associated Press reports that MedStar Health’s recent ransomware attack was executed by exploiting known vulnerabilities from as far back as 2007. MedStar’s failure to apply security patches in time could leave them legally exposed.

Survey Finds Hospital Executives Increasing Focus on Patient Expectations and Engagement

An Advisory Board Company survey of healthcare CEOs finds that the most common executive action items include minimizing clinical variation, redesigning services for population health, meeting rising consumer expectations, deploying patient engagement strategies, and controlling avoidable utilization.

News 4/6/16

April 5, 2016 News 8 Comments

Top News

image

A study of scripted standardized patient encounters performed by physicians of six virtual visit companies finds significant clinical variation. Remote physicians didn’t ask the right questions or didn’t perform the correct examination steps in 30 percent of visits and gave the wrong diagnosis or no diagnosis at all 23 percent of the time. They ordered urine cultures for only 34 percent of recurring urinary tract infection patients and failed to order the recommended X-rays for ankle pain 84 percent of the time. The authors conclude that while virtual visits may involve lower rates of inappropriate testing, remote physicians often don’t order even medically indicated tests, possibly because of the complexity involved in following up on test results from the patient’s home location or concerns about insurance coverage.

The authors also note that some of the companies performed better than others and suggested they share best practices. The virtual visit companies tested were Ameridoc, Amwell, Consult a Doctor, Doctor on Demand, MDAligne, MDLIVE, MeMD, and NowClinic.

While the virtual visits weren’t perfect, they were not compared to face-to-face visits. Those probably have a similar lack of conformance to best practices, but there’s no good way to send standardized (i.e., fake) patients into an exam room to serve as mystery shoppers.


Reader Comments

image

image

From PHE: “Re: Sandlot Solutions. Has ceased operations. They were down to a skeleton crew as of last week, looking for last-minute funding to maintain core operations, but I was told that the board had already voted to close down if nothing came through as of Friday. No evidence of ongoing operations this morning.” Unverified. However, the logo of Sandlot Solutions was recently removed from the banner of parent company Santa Rosa Holdings – it was there in a March 13, 2016 cached copy but is gone now.

image

From Luxardo: “Re: NYC Health + Hospitals going live on Epic. Reports say it went OK, but 900 Epic installers were on site at the two facilities whose combined census was 700. No wonder these installs cost a small fortune – that has to be at least $2 million per day to have a tech person standing next to each clinical person all day. The real test will be 30 days from now when all those installers have gone back to Wisconsin.”

image

image

From Concerned Customer: “Re: Vocera. Do you put in any stock into this?” SkyTides, which sells “deep due diligence” to hedge funds in “targeting over-hyped stocks and outright frauds,” calls Vocera and Chairman Robert Zollars “purveyors of fraud and obsolete, defective products.” It says Zollars previously ran two companies that paid $591 million to settle fraud charges (Neoforma alone paid $586 million, it says) and claims Vocera strong-armed customers into accepting early product shipments so that the resulting revenue could help the company hit forecasts. It says insiders have been aggressively selling their shares and that Vocera’s one product hasn’t had a major upgrade since 2011 and “appears to be inferior” even though it’s the most expensive. SkyTides accuses Vocera of committing accounting fraud in the three of 16 quarters it reported a profit, says the company has lost $110 million, and predicts that Vocera will have to cut prices to compete. Vocera shares had little reaction to the announcement and have risen 29 percent in the past year vs. the Dow’s decrease of nearly 2 percent. A federal judge gave initial approval a month ago for Vocera to pay $9 million to settle securities class action litigation that accused it of telling investors during its March 2012 IPO that the Affordable Care Act would boost its business, then admitting in May 2013 that ACA was actually hurting sales, sending shares down 37 percent. I’ll be interested to see if Vocera responds, although since it’s an analysis firm making the claims rather than a regulatory agency or litigant, they wouldn’t have much to gain and would instead call attention to the unflattering charges.


HIStalk Announcements and Requests

image image

We funded the DonorsChoose grant request of Mr. Cho in providing 15 scientific calculators for his Bureau of Indian Affairs high school math classes in South Dakota, replacing the 99-cent models he was using. He reports, “These calculators have made it easier for us to do more in the 47 minutes I’m allotted each day per class. The students are now able to move into higher level math. We just started 4th quarter on Monday and your calculators have, over the past three months, allowed us to go into pre-calculus in my Algebra 2 class. My Algebra 1 students were able to use the calculators and fly through it and are now starting Algebra 2! We will continue to use these calculators weekly for many years.”

image image

Also checking in is M. Feeley from New York, whose pre-schoolers are experimenting with the light kits and games we provided.


Webinars

April 8 (Friday) 1:00 ET. “Ransomware in Healthcare: Tactics, Techniques, and Response.” Sponsored by HIStalk. Presenter: John Gomez, CEO, Sensato. Ransomware continues to be an effective attack against healthcare infrastructure, with the clear ability to disrupt operations and impact patient care. This webinar will provide an inside look at how attackers use ransomware; why it so effective; and recommendations for mitigation.

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

Sunquest acquires GeneInsight, a genetic testing software firm created by Partners HealthCare (MA). Sunquest had previously invested in the company. which will operate as a wholly-owned subsidiary from its Boston office.

image

Cumberland Consulting Group acquires 50-consultant  Oleen Pinnacle Healthcare Consulting, expanding the company’s payer market capabilities.

image

Credentialing software vendors Symplr and Cactus Software merge.

image

Healthcare software vendor Ability Network acquires EHealth Data Solutions, which offers software for senior living providers. Minneapolis-based Ability, whose chairman and CEO is former McKesson President and CEO Mark Pulido, has made four other acquisitions in the past two years following a $550 million investment by Summit Partners.


Announcements and Implementations

image

St. Luke’s University Health Network (PA) goes live on Bernoulli’s medical device integration and connectivity in six of its hospitals as part of its Epic implementation.

image

NYC  Health + Hospitals goes live on Epic at its Elmhurst and Queens hospitals, reporting no major problems.

Massachusetts General Hospital and two other Partners HealthCare (MA) facilities go live on Epic, with 1,000 Epic employees participating in Boston.

ESD celebrates its 26th year in the consulting business, noting that its implementation team members worked 30,000 hours in March.

image

McKesson signs up 2,111 of its employees to the Gift of Live Bone Marrow Foundation’s donor registry.


Government and Politics

image

The Federal Trade Commission creates an online tool for developers of health-related software that asks questions about how their software works and then suggests specific federal laws and regulations (such as HIPAA and the FDA) that might apply to them.


Privacy and Security

image

The Associated Press reports that MedStar Health’s ransomware attack exploited known flaws in the Red Hat’s JBoss Application Server that date back to at least 2007. Red Hat and the federal government have for years urged JBoss users to apply patches that correct a common configuration error that allows external users to take control of the server. The article notes that MedStar may be fully exposed to lawsuits or sanctions if it (or its vendors) failed to apply the patch and therefore could be construed as not having exercised reasonable diligence in protecting its systems and data. MedStar criticized media coverage of its attack, saying the publicity will encourage copycat hackers.


Other

Epic’s trade secrets lawsuit against India-based Tata Consultancy Services goes to trial in federal court.

A Wall Street Journal op-ed piece called “How Not to End Cancer in Our Lifetimes” says the White House’s proposed changes to patient consent policies may impede research. The author, dean of Weill Cornell Medicine, says proposed HHS regulations will limit the number of patients who consent to having their leftover medical samples de-identified and stored for future research. It would also require providers to obtain new specimens from each patient every 10 years and to manage their consent documents.

Hospital executives surveyed by The Advisory Board Company state their top concerns as minimizing clinical variation, retooling for population health management, meeting rising consumer expectations, developing patient engagement strategies, and controlling avoidable utilization.


Sponsor Updates

  • AirStrip will exhibit at the Health Evolution Summit April 13-15 in Dana Point, CA.
  • Besler Consulting will exhibit at the HFMA Hudson Valley Annual Institute 2016 April 7 in Tarrytown, NY.
  • Crossings Healthcare Solutions will attend the Cerner Southeast RUG April 20-22 in Charlotte, NC and the Great Lakes RUG May 31-June 2 in Chicago.
  • Crain’s Chicago Business names Burwood Group as one of the Best Places to Work for Women Under 35.
  • Caradigm will exhibit at the Care Coordination Institute April 7-9 in Greenville, SC.
  • Clockwise.MD will present at the 2016 Spring Healthcare Tour and Conference April 5-6 in Nashville, TN.
  • CompuGroup Medical will exhibit at G2 Lab Revolution April 7-8 in Phoenix, AZ. 
  • Direct Consulting Associates will exhibit at Health Connect Partners – Hospital & Healthcare IT Conference April 13-15 in Atlanta.
  • Divurgent will exhibit at the Health Information Technology Summit April 10-13 in Washington, DC.
  • EClinicalWorks will exhibit at the NCCHC Spring Conference on Correctional Health Care April 10-12 in Nashville, TN.
  • HCI Group CEO Ricky Caplin earns recognition from Consulting Magazine, KPMG, and the University of Florida Entrepreneurship & Innovation Center.
  • Healthgrades releases its 2016 Outstanding Patient Experience Award and 2016 Patient Safety Excellence Award recipients.
  • HealthMEDX will host its annual user group meeting April 12-14 in St. Louis.
  • Healthwise will exhibit at the Allscripts Central Region User Group April 13-15 in Minneapolis.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Could Ransomware’s Rise Be Healthcare’s Downfall?

April 4, 2016 News 7 Comments

We look at the evolution of what’s turning out to be the hottest health IT buzzword in 2016 and talk with several cybersecurity experts to gain a technical understanding of the problem.
By
@JennHIStalk

image

Ransomware. It’s a word that didn’t make most lists of healthcare IT buzzwords to watch in 2016, yet it has become synonymous with industry headlines in the last several weeks. Its mere mention is now perking up the ears of mainstream journalists and evoking a healthy level of fear from hospital CIOs.

Around 10 hospitals in North America (that we know of) have made news due to ransomware attacks. In February, Hollywood Presbyterian Medical Center (CA) became ransomware’s poster child as it went public with its attack and subsequent decision to pay $17,000 in bitcoin to regain control of its hijacked computer systems. MedStar Health (MD) is nipping at the headline heels of HPMC thanks to a late-March attack similar in nature. While the health system has not formally acknowledged the hack as one of the ransomware variety, media reports indicate that its files have indeed been held captive for $18,500.

image

MedStar is still attempting to get back to business as usual with fax machines and paper records. Representatives have been quick to publicly state that care quality — and in most cases, access — have not been compromised, though anonymous hospital employees have indicated otherwise. There’s also the certain mess to clean up once systems are restored and manually recorded information is backloaded and old charges are posted.

As 2016 progresses, hackers and their victims are learning the ransomware ropes. Varieties of attacks are evolving as cybercriminals experiment with new methods of socially engineered phishing campaigns and the levels of extortion their victims will find acceptable. Providers – even smaller physician practices – are reevaluating their IT infrastructure, pointing an especially critical eye at breach protocols already in place and the integrity of their backups.

In addition to these evaluations, the healthcare community is no doubt wondering who will be next and how can these attacks be prevented? Should ransoms be paid? As insidious ransomware spreads, so to do the concerns of providers.

An Evolving Internet Helps Hackers Thrive

As cybersecurity professionals already know, ransomware attacks are nothing new. Late 1980s versions of the business model were spread by floppy disks that locked down files – a highly inefficient method that prevented early attempts at ransomware attacks from becoming widespread. Internet availability helped it creep back in around 2005/2006, and to then take off between 2011 and 2012 as use of the the World Wide Web became more widespread.

image

“What really changed the game was the first CryptoLocker malware introduced in 2013, which is what we see almost exclusively now for ransomware,” explains Ryan Olson, intelligence director at Palo Alto Networks. “What’s changed since then is an apparent shift in the minds and methods of cybercriminals. They’ve realized that using bitcoin for payment is very profitable, a method much less likely to get them arrested. It’s certainly a far cry from the days of dealing directly with banks and stealing people’s credentials.”

image

Olson also attributes the rise in ransomware attacks to a corresponding explosion in tools aimed at making the exploits of hackers more effective. “We’re tracking about 30 different types of ransomware right now – from CryptoLocker to Cryptowall to TeslaCrypt – and many of them are being provided to hackers as a service,” Olson says. “If you have a criminal actor who can’t write malware, but who wants to get people’s money through this business model, all they have to do is go out and find a service that will do it for them. All they have to do is distribute the malware and collect the money.”

Thanks, MU (Healthcare Becomes an Easy Target)

It’s not hard to understand why hackers have begun targeting healthcare organizations. The transition away from paper records to digital systems has helped hospitals become a hacker’s sweet spot. “In the past, infecting a bunch of health systems wasn’t very lucrative because trying to monetize stolen healthcare records was pretty challenging,” Olson says. “Most of those computers didn’t have financial information on them. But with ransomware, any system that a hospital needs access to can be a source of monetization. I think that’s something that criminals have realized. Hospitals in particular are a relatively soft target because nearly any system inside their network can be monetized since it is necessary to daily operations and contains sensitive information that hackers can encrypt.”

image

Patrick Upatham, director of threat intelligence at Digital Guardian, sees hospitals as the latest flavor of the month. “It’s mostly just a numbers game,” he says. “Public services like hospitals ride the double-edged sword of having to publish information about themselves to service their customers, while at the same time providing a map of ingress avenues of attack that can be exploited. The problem stems from when these normal avenues of contact with hospital personnel are leveraged in an attacker’s favor and lead to that one point of weakness that allows them to get their criminal foot in the door.

“This lopsided, or asynchronous, attack model can be easily automated by an attacker to identify and gather contact information for hundreds if not thousands of hospitals,” he adds, “which could then lead to a malicious email sent through an anonymized service. All it would take is one user to click one link, visit one page, or open one document crafted with certain healthcare terminology to infect a machine. Combined with a self-propagating mechanism, a single infection could take its toll on a hospital.”

“Economically speaking,” Upatham adds, “the cost for sending tens of thousands of emails can be recouped 100 times over from a single hospital willing to pay the ransom. Statistically speaking, with the average success rate of a targeted phishing email hovering around 40-50 percent, even at 1 percent, with one hospital out of a 100 falling for it, that can still be good business. These hits are probably just happenstance from the statistical approach of phishing attacks.”

Worming Its Way In

image

While security firms are monitoring dozens of types of ransomware, most experts agree that the attacks occur in two main ways – phishing emails, as Upatham alluded to above, and exploit kits. “Phishing emails are typically sent indiscriminately to a lot of different people,” Olson explains. “In some cases, they prompt the recipient to open up a file that’s attached to an email. When opened, the file exploits a vulnerability on their computer to infect the system, or tells them to enable macros in Word. We used to have a lot of trouble with macro malware back in the early 2000s, after which Microsoft turned them all off by default so that people weren’t getting infected any more. In 2014, we started seeing attackers use these again in trying to trick people to enable them. The macro is really simple in that it just downloads the malware and puts it on the victim’s computer.” Olson adds that the themes of phishing emails vary. They can include fake package notification messages, fake order reports, and fake travel reports.

While less common than phishing emails, exploit kits are another common method used in ransomware attacks. “Exploit kits are an attacker code that hackers try to inject into Web pages by compromising the Web servers that are hosting them,” he says. “They exploit code by taking advantage of a vulnerability on a victim’s computer to automatically install malware. We call these ‘drive-by downloads’ because they install the malware so quickly and stealthily.”

The Realities of Successful Prevention

When it comes to preventative measures, healthcare systems can’t rest on their IT laurels. Neither can they settle for the advice of the latest “listicle” and its high-level admonitions to educate, back up, and prepare. Enterprise healthcare IT environments are far more nuanced than a 10-bullet-point list and it seems that no amount of investment will successfully overcome human nature’s inclination to click.

image

“It’s all great advice, but some of it is totally impractical,” says David Finn, health information technology officer at Symantec and recently appointed member of the new HHS Cyber Security Task Force. “Healthcare isn’t going to stop using email. You can’t tell physicians and nurses they can’t get on the Web. There are a couple of steps you have to take. The first thing is look at the battle today – the good guys versus the bad guys. The battleground is really the end point again, so you have to start there with good security on all your end points. It has to be installed, updated, and patched regularly, which is where a lot of organizations fall down.”

“The second step,” Finn continues, “which is almost as important as the first, is user education. Computers don’t click on dangerous links and tablets don’t open emails they’re not supposed to – people do. In Hollywood Presbyterian’s case, for example, every employee at that organization received an email with what appeared to be a legitimate invoice. It’s really hard for people, when they think they’re getting a bill for something, to not open it even though they may not have bought anything.”

Upatham likens the need for user education to good hygiene: “Educating users about possible attack attempts and making sure they practice good online hygiene should go hand in hand with hospital hygiene. If any place of employment should understand the implications of introducing viruses to a healthy system through dangerous means, it should be in a hospital. The same stress and education should be extended to online access.”

Once good online hygiene and end-point security are addressed, providers still must deal with a laundry list of other less sexy but just as important preventative measures. “You do have to have content scanning and filtering under your email systems and on your Internet gateways,” Finn adds. “Attackers frequently use old vulnerabilities to use filter command and control structures to send data out, so you have to have all your servers and all your storage patched and current with your operating systems, and all the utilities that should be on those devices.”

“Then of course you need to have some kind of advanced threat protection looking at intrusion prevention or intrusion detection, because a lot of times malware comes in and lives on your network for extended periods – months and months, even up to a year, while it’s mapping data and networks. It’s probably doing a better job than most of our organizations actually do when it comes to that. You pretty much have to be on the lookout for anomalous activity all the time. And that brings us back to end-point security again so that the worm isn’t working through and propagating itself across the whole network.”

“Last but certainly not least,” says Finn, “and this is the one everyone hollers about, is the need to deploy and maintain a comprehensive backup solution. That includes having protection and anti-malware on the storage itself. If you’re relying on the backup groups, and the backup PC gets infected, you’re shooting yourself in the foot because this new malware is pretty sophisticated. It will look for those backups, find where those backups are going, and then it will encrypt them, too. You need to look at the storage and the storage needs to be completely offline from the typical point of entry for these malware devices.”

Olson believes that the biggest preventative challenge healthcare organizations are running into involves shared storage systems. “When a system gets infected and it’s attached to a shared storage system – a network drive of some kind that’s configured so that any user can write files to it – in those cases, the malware will actually go in and find that network storage drive where everybody is sharing all of their files and encrypt all of them. That’s where the biggest impact occurs. At that point, you’ve gone from a single system that was impacted to suddenly all of the systems that rely on that shared data. Now none of them can access the data, and you have a much bigger problem than you had before. Limiting access to those shared drives is another component of protection against ransomware.”

Ransomware Requires Rethinking Strategy and Budgets

The MedStar attack – the fourth such healthcare breach to occur in just a few weeks – should serve as a wakeup call to healthcare executives across the country, according to Upatham. “Hackers are after the healthcare industry now more than ever,” he notes. “Now that they’ve easily cracked a handful of hospital firms, and many have paid the ransom fees, hackers will continue to attack for additional monetary gain.”

Finn concurs that the time is now for the healthcare C-suite to wake up: “Everyone needs to be rethinking their strategy, and not just around ransomware. We complain about the pace of change in healthcare, but the bad guys are moving way faster than us. They don’t have the constraints of regulations, taxes, and budgets. It’s easier for them to get ahead of us than it is for us to get ahead of them. If there’s one lesson we can take away from all this, and not to kick someone when they’re down, but if you look at Hollywood Presbyterian, they didn’t pay that ransom to get access to computers or to get data back, though that was ostensibly what was happening. They paid the ransom because they couldn’t take care of sick people. That’s a business issue. That’s not an IT issue. Until the CEOs, CFOs, CNOs, and CMOs recognize that this is really a threat to their business and ability to care for patients, I don’t think IT will get the support it needs in terms of staff, budget, tools, and training.”

image

In terms of budget priorities, Sensato CEO John Gomez suggests making two immediate purchasing decisions. “Invest in the latest backup software available,” he says, “and, beyond that, get someone to do a backup and recovery assessment. Make sure it is holistic and frequent, and make sure you test your ability to recover. If you can’t back up, you will pay your attackers. The second investment is in user education. Every independent software vendor, independent hardware vendor, provider, and payer should be informing their users about what to look for, and that should come from the CEO. Users need to understand that being aware is critical to avoiding attacks.”

Preparing for What Comes Next

As Finn previously mentioned, cybercriminals are always one step ahead of the game, unencumbered by the constraints of law-abiding organizations. Thus, it’s nearly 100-percent guaranteed that ransomware attacks will continue to evolve in an attempt to develop an immunity to healthcare’s defenses.

“I wish I could say that all providers have to do is back up, test, and educate,” says Gomez, “but ransomware is evolving. Last week, the FBI issued a warning about a new strain of ransomware that doesn’t use phishing attacks as the attack vector. Although back up, test, and educate is a short-term fix, the reality is that you either decide cybersecurity is a top three priority for your organization and take aggressive steps to lock things down, or you’re pretty much rolling the dice.”

“The last thing to keep in mind,” he says, “is that ransomware is just the attack du jour. It’s not like attackers will say, ‘Ok, we’ve messed with healthcare enough, now let’s go mess with finance for a while.’ Attacks will evolve and a whack-a-mole approach to cybersecurity is not going to work. You need a holistic, long-term, and aggressive strategy.”

Olson sees the evolving Internet of Things as the perfect conduit to a corresponding evolution of the ransomware business model. “If an attacker is able to compromise some sort of device, even though it’s not a traditional computer, one of the monetization mechanisms they might have for that is to hold it for ransom. That’s something we really haven’t seen before, but I fully expect to see it in the future as these devices come online and attackers start to search for new systems they can infect, take over, and turn into a profit. It would not surprise me if we saw ransomware attacks against medical devices. I hope that’s not the direction that attackers go, simply because they’re preying on the most vulnerable people.”

“We know that medical devices have fallen victim to ransomware,” Gomez confirms. “As best we can tell, the devices were not the target of the attack, but rather fell victim to a form of ransomware that attacks much like a virus, for lack of a better term. The virus spreads and just does its thing across the network. As scary as that is, the bigger issue we will no doubt soon face is the purposeful attack of a medical device. I started the Medical Device Cybersecurity Task Force, an open-source nonprofit, to specifically address the challenges faced by the industry in securing medical devices. We are currently working on compiling 25 short-term steps that a healthcare organization should consider to secure their devices. We are also conducting research in our labs and running several pilots with three different healthcare organizations.”

Best Practices Can Only Come From Learning Experiences

Healthcare, unfortunately, will likely have to suffer through several dozen or more ransomware attacks before providers can definitively say what worked and what didn’t in terms of prevention and remediation. Finn is hopeful that the nascent HHS Cyber Security Task Force will help the healthcare community share recommendations that will ultimately influence federal legislation.

“You know that in healthcare, we’re not only siloed within the four walls of the hospital, but across the industry,” he says. “In terms of new care models and new security models, that is going to have to change. It’s going to take all of us. Whether we’re providers, vendors, or business associates, we’re all going to have to come together and decide what the addressable items need to be. We’re going to have to have some way of knowing what everyone else is doing to prevent their organizations from becoming the next victim. If there’s one thing we do know, it’s that everyone trying to solve security issues by themselves doesn’t work. We’ve all got to come together and drive a consistent message across this industry.”

Monday Morning Update 4/4/16

April 3, 2016 News 5 Comments

Top News

image

The San Diego newspaper reports that Alvarado Hospital Medical Center (CA) has been hit by an unspecified “malware disruption.” The hospital declines to say whether it was ransomware, but states that it has not paid a ransom. The FBI is investigating. The hospital is owned by Prime Healthcare Services, which had two other of its hospitals recently disrupted by ransomware.

image

Meanwhile, Kings Daughters Health (IN) is hit by ransomware, with some systems remaining down since Wednesday morning. A hospital user opened an email attachment infected with the Locky malware.

image

The US Department of Homeland Security’s US-CERT, in collaboration with the Canadian Cyber Incident Response Centre, issues a ransomware alert that specifically calls out hospitals. It recommends that individuals and organizations:

  • Perform and test backups and store them offline.
  • Use application whitelisting that allows only specified programs to run.
  • Apply patches and antivirus updates.
  • Restrict user install and run privileges.
  • Block suspicious attachments and avoid enabling macros from all email attachments.
  • Don’t click unsolicited Web links.

Reader Comments

From Jack: “Re: MedStar Health. Has a major portion of their infrastructure and server management outsourced to Dell, which manages them with offshore IT people. I find myself wondering if Dell is at risk here, and if so, are there others who are vulnerable to ransomware attacks.” Unverified.

From Kermit: “Re: whales. Sure, they get personal health records. Just not us.” Researchers propose creating electronic records for the 84 endangered whales that live in Puget Sound from spring to fall, explaining, “The goal is to really start getting a lot of data and pull them together in a way that permits easier analysis. Ultimately, the real benefit of any health record is to help make management decisions.”

From Boy Blunder: “Re: Epic 2015. I was on the call when an Epic support executive asked us to delay, with similar talking points to what was stated on HIStalk. He tried to minimize things, saying they’ve found fewer problems for each project released in 2015 and that waiting for a couple of fix packages would be better. That doesn’t square with the situation since we were discouraged from pursuing 2015 when it was released and have been warned on various pieces of broken functionality for months. An experienced TS’er  said her colleagues testing these packages are worried about unrealistic timelines and the likelihood of newly created problems. She also expressed a lot of skepticism about the message we’d been getting from Epic’s leadership about things being on the right track given how long 2015 has been on the market, and encouraged us to consider delaying a bit further. It concerns me greatly that I’m getting a more realistic view of what’s happening from people that aren’t leading Epic than from those that are.” Unverified.

From Just HIT On: “Re: healthcare IT. I’m an undergrad in an unrelated major and just accepted a job with a big health IT vendor’s corporate development arm. I asked an associate there what I should read as a helpful daily news source and he suggested HIStalk. Do you recommend books or starter material so I can get my feet wet before starting?” I haven’t seen any books that would be a timely overview of the entire health IT industry. I would probably suggest reading all HIStalk posts going back six months or so – headlines, news posts, interviews, Dr. Jayne, our posts from the HIMSS conference, etc. Make notes about concepts that are unclear – say, clinical decision support or patient identifiers – and then search to find previous HIStalk posts on those topics. That will give you an immersion into what’s going on right now with some context and often a link to an article that I found acceptably authoritative. I’ll offer readers the chance to weigh in as well.

image 

From Lantana: “Re: Epic. I’d to offer a shout-out to the Open.Epic team and give them credit for their openness (pun intended) in responding to another vendor’s very detailed requests related to how they integrate, in this case related to pushing CCDs. Unlike so many other vendors, they’re willing to invest time, answer progressively more detailed questions, and, it seems, always do so with a smile. This was all done simply through the website, with no clients involved and no clients even named. Simply open information sharing. So many other vendors, though not all, approach integration grudgingly and usually would only engage with another vendor if required or paid by their client. I’m grateful Epic has taken a different tack.” Verified, as this report came from a non-anonymous vendor executive.


HIStalk Announcements and Requests

Thanks to the following sponsors, new and renewing, that recently supported HIStalk, HIStalk Practice, and HIStalk Connect. Click a logo for more information.

image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image
image

image

Fifty-nine percent of non-profit employees admire and respect their organization’s highest-ranking executive, while in the for-profit world, it’s a 71 percent approval rating. That might be surprising to folks who assume that non-profit leaders earn more respect. New poll to your right or here: who would you trust most to protect your personal health data?

image image

Ms. Lacey says her Texas elementary school class is using the two tablets we provided in funding her DonorsChoose request for before-school skills practice, in activity stations, and in after-school tutorials, with students asking her even before she arrives in the classroom if they can use them.

image image

Also checking in is Ms. Alley of Virginia, whose elementary school class received an iPad Mini and accessories via our donation. Students are required to spend 20 minutes with the Imagine Learning program and previously could rarely get time with the school’s few iPads. They are also using it to practice math skills and she is using  an app called Class Dojo to communicate with parents. She concludes, “The iPad mini has become an integral part of our classroom. I can’t imagine the days before we had it. Thank you so much for your generosity. You have truly made a huge difference to our classroom and our lives.”


Last Week’s Most Interesting News

  • MedStar Health becomes the latest health system to have its systems taken down by ransomware.
  • Orion Health lays off 10 percent of its US workforce.
  • Southcoast Hospital (MA) will lay off 95 employees after a Q1 loss of $10 million that it blames on Epic project cost overruns.
  • Dell announces that it will sell its IT services business, the former Perot Systems, to Japan’s NTT Data for $3.05 billion, 20 percent less than it paid for the business in 2009.
  • Mandatory electronic prescribing takes effect statewide in New York.

Webinars

April 8 (Friday) 1:00 ET. “Ransomware in Healthcare: Tactics, Techniques, and Response.” Sponsored by HIStalk. Presenter: John Gomez, CEO, Sensato. Ransomware continues to be an effective attack against healthcare infrastructure, with the clear ability to disrupt operations and impact patient care. This webinar will provide an inside look at how attackers use ransomware; why it so effective; and recommendations for mitigation.

Here’s the recording of Vince and Frank doing “rise of the small-first-letter vendors.”

Contact Lorre for webinar services. Past webinars are on our HIStalk webinars YouTube channel.


Acquisitions, Funding, Business, and Stock

image

E-MDs closes its acquisition of McKesson’s ambulatory PM/EHR products.

image

Valence Health lays off 75 employees, half of them in Chicago. Nathan Gunn, MD, president of the company’s population health and risk services, has left for unspecified reasons.


Other

The bond ratings agency of Baptist Health Care Corporation (FL) affirms its A- rating, but notes that profits will be hit by EHR training costs. Its Allscripts project will require $40 million in capital over the next five years for a March 2017 go-live, with Allscripts providing a $22 million, 10-year, interest-free loan.

The Cincinnati newspaper notes that Major League Baseball’s EHR allows players or their doctors to send their electronic health information to wherever they like, allowing a team’s physician to review a player’s medical history before recommending that the team acquire him. A snippet:

But in 2010, MLB introduced its Electronic Medical Records system, housing medical information on every player on every team in one centralized, online location. When a trade is being discussed, one team doctor can give another an electric key to access the records of a specific player. (Players are also given this key to distribute to whomever they wish once they reach free agency.) Access to such records usually shuts off after 24 hours, underlining how streamlined MLB has made a process that used to take at least several days. “We could do it the same day now,” Kremchek said. “The girls who work in my office can pull it up on a computer, and I can do it in the matter of 10 minutes.”

Those records are also dizzyingly complete. All available medical information on every player at every level of every organization is included, and go far beyond the scans taken when players first report to spring training each February. If a player sought treatment for any issue at any point in the season – even if he was issued two ibuprofen for a headache – that information is included. That’s a stark contrast from years ago, when a team didn’t know much about its own players, much less anyone else’s. “Twenty years ago when we started doing this, we had our own minor-league players showing up who had surgeries,” Kremchek said. “We never knew who had what, and they’d show up and have bandages on.”

image

Boston Children’s Hospital will roll out an Amazon Echo voice-powered system in the next few weeks that will “embed Children’s Hospital know-how” in the device.

image

Hospitals in Croatia entertain pediatric patients by having clown-physicians put on shows via Skype every Thursday at 5:00 p.m.

image

The Boston newspaper discovers that the Massachusetts Department of Health cited Brigham and Women’s Hospital (MA) last year for breaking its own policies in caring for a Middle Eastern prince who brought his personal chef and a seven-person entourage along with him for a seven-month stay in two penthouse suites. In a good example of VIP Syndrome, the patient had a drug-resistant infection but hospital management ordered employees not to wear mandatory protective gowns because the prince found them “offensive.” The hospital allowed him to leave for overnight hospital stays and allowed members of his entourage to administer his medications and clean his IV site. Employees were also alarmed by the large number of narcotics ordered for him and delivered to his penthouse.

image

Epic’s April Fool’s home page makeover was even wittier than usual, featuring clever humor from obviously well-read recent liberal arts grads. A faux news item involving a rebranding of the company’s Cogito ergo sum reporting system to its French translation of Je Pense Donc Je Suis explained with the drollest of humor, “Most customers simply found it too challenging to pronounce correctly a phrase from an irrelevant lingua mortua – ergo the name change …There was a certain a priori knowledge of Latin that was, ipso facto, just not present for most people.” An article citing an HIStalk interview with Athenahealth’s Jonathan Bush claims he’s been using MyChart while thinking it’s his own company’s portal, commending its “chill vibe” and adding, “I pulled my phone out after my duet with Erykah Badu at SXSW because I remembered I needed to schedule some vaccinations. Tom Hardy and I are running an ultramarathon in Madagascar next month. Anyway, I had them scheduled in under a minute. See, this kind of positively disruptive patient empowerment is exactly what Athenahealth is about.”

Another pretty good April Fool’s thing is Twine Health’s “Introducing Snapchart,” the EHR that immediately destroys the information you enter (if you’re over 30, Snapchat text messages self-destruct once read). It would have been nearly perfect had they wired CEO John Moore, MD, PhD with a lapel mike or used a directional one for better audio. Watch for cameos by John Halamka and ZDoggMD.


Sponsor Updates

  • TeleTracking will exhibit at the AORN Surgical Conference & Expo 2016 April 3-5 in Anaheim, CA.
  • Zynx Health announces call for nominations for the 2016 Clinical Improvement Through Evidence Award.

Blog Posts


Contacts

Mr. H, Lorre, Jennifer, Dr. Jayne, Lt. Dan.
More news: HIStalk Practice, HIStalk Connect.
Get HIStalk updates.
Send news or rumors.
Contact us.

125x125_2nd_Circle

Text Ads


RECENT COMMENTS

  1. Re: What your repository experience says For me, it was Y2K that really drove home the lesson: No one knows…

  2. Lab coats are unnecessary. Name tags are a good idea, and more professional. Hiking boots are okay, too.

  3. It’s troubling to see how important public health initiatives like vaccinations are being targeted, especially with the long-term benefits they…

  4. Re:. Stargate AI Project I'm sure this will end differently than that Foxconn LCD factory in Wisconsin. And the fact…

Founding Sponsors


 

Platinum Sponsors


 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Gold Sponsors


 

 

 

 

 

 

 

 

RSS Industry Events

  • An error has occurred, which probably means the feed is down. Try again later.

RSS Webinars

  • An error has occurred, which probably means the feed is down. Try again later.