Impact of Trauma Hospital Ransomware Attack on Surgical Residency Training

What happens to rural hospitals during a ransomware attack? Evidence from Medicare data

PURPOSE

Hospitals are increasingly the target of cybersecurity threats, including ransomware attacks. Little is known about how ransomware attacks affect care at rural hospitals.

METHODS

We used data on hospital ransomware attacks from the Tracking Healthcare Ransomware Events and Traits database, linked to American Hospital Association survey data and Medicare fee-for-service (FFS) claims data from 2016 to 2021. We measured Medicare FFS volume and revenue in the inpatient, outpatient, and emergency room setting-at the hospital-week level. We then conducted a stacked event study analysis, comparing hospital volume and revenue at ransomware-attacked and nonattacked hospitals before and after attacks.

FINDINGS

Ransomware attacks severely disrupted hospital operations-with comparable effects observed at rural versus urban hospitals. During the first week of the attack, inpatient admissions volume fell by 14.7% at rural hospitals (P = .04) and 16.9% at urban hospitals (P = .01)-recovering to preattack levels within 2-3 weeks. Outpatient visits fell by 35.3% at rural hospitals (P<.01) and 22.0% at urban hospitals (P = .03) during the first week. Emergency room visits fell by 10.0% at rural hospitals (P = .04) and 19.3% at urban hospitals (P = .01). Travel time and distance to the closest nonattacked hospital was 4-7 times greater for rural ransomware-attacked hospitals than for urban ransomware-attacked hospitals.

CONCLUSIONS

Ransomware attacks disrupted hospital operations in rural and urban areas. Disruptions of similar magnitudes may be more detrimental in rural areas, given the greater distances patients must travel to receive care and the outsized impact that lost revenue may have on rural hospital finances.

The crippling effects of a cyberattack at an academic level 1 trauma center: An orthopedic perspective

INTRODUCTION

Malicious cyberattacks are increasing in frequency and severity with healthcare institutions spending an average of over 10 million dollars to resolve the consequences of healthcare data breaches. This cost does not include the effect of a downtime event should a healthcare system electronic medical record (EMR) lose functionality. An Academic Level 1 trauma center suffered a cyberattack resulting in a total EMR downtime of 25 days. Orthopedic operative time was used as a surrogate for OR functionality during the event and a framework with specific examples is presented to promote rapid adaptation during downtime events.

METHODS

Operative time losses were identified by calculating a running average of weekday total in room operative time during a total downtime event secondary to a cyberattack. This data was compared to week-of-the-year matched data from the year prior and the year after the attack. A framework for creating adaptations to a total downtime event was created by repeatedly interviewing different provider groups and identifying how they adjusted care to the challenges faced.

RESULTS

Total weekday in room operative time during the attack decreased by 53.4% ± 12.2% and 53.2% ± 14.9% when comparing the matched period one year prior and one year after, respectively. Immediate challenges to patient care were identified by small groups of highly motivated individuals, with self-assigned agile teams formed. These teams sequenced system processes, identified failure points, and created real-time solutions. A frequently updated EMR backup mirror and hospital disaster insurance were crucial for mitigating the impact of the cyberattack.

CONCLUSIONS

Cyberattacks are expensive and their downstream effects, including downtime events, can be crippling. Agile team formation, process sequencing, and understanding EMR backup times are tactics used to combat the challenges of a prolonged total downtime event.

LEVEL OF EVIDENCE

Level III retrospective cohort.

Teasing out Artificial Intelligence in Medicine: An Ethical Critique of Artificial Intelligence and Machine Learning in Medicine

The rapid adoption and implementation of artificial intelligence in medicine creates an ontologically distinct situation from prior care models. There are both potential advantages and disadvantages with such technology in advancing the interests of patients, with resultant ontological and epistemic concerns for physicians and patients relating to the instatiation of AI as a dependent, semi- or fully-autonomous agent in the encounter. The concept of libertarian paternalism potentially exercised by AI (and those who control it) has created challenges to conventional assessments of patient and physician autonomy. The unclear legal relationship between AI and its users cannot be settled presently, an progress in AI and its implementation in patient care will necessitate an iterative discourse to preserve humanitarian concerns in future models of care. This paper proposes that physicians should neither uncritically accept nor unreasonably resist developments in AI but must actively engage and contribute to the discourse, since AI will affect their roles and the nature of their work. One's moral imaginative capacity must be engaged in the questions of beneficence, autonomy, and justice of AI and whether its integration in healthcare has the potential to augment or interfere with the ends of medical practice.

The Value of the Surgeon Informatician

Clinical informatics is an interdisciplinary specialty that leverages big data, health information technologies, and the science of biomedical informatics within clinical environments to improve quality and outcomes in the increasingly complex and often siloed health care systems. Core competencies of clinical informatics primarily focus on clinical decision making and care process improvement, health information systems, and leadership and change management. Although the broad relevance of clinical informatics is apparent, this review focuses on its application and pertinence to the discipline of surgery, which is less well defined. In doing so, we hope to highlight the importance of the surgeon informatician. Topics covered include electronic health records, clinical decision support systems, computerized order entry, data analytics, clinical documentation, information architectures, implementation science, quality improvement, simulation, education, and telemedicine. The formal pathway for surgeons to become clinical informaticians is also discussed.

Interprofessional Communication Goes Up When the Electronic Health Record Goes Down

OBJECTIVE

The electronic health record (EHR) has been faulted for the erosion of interprofessional communication and the patient-physician relationship. Surgical residents may be susceptible to communication workarounds facilitated by the EHR, but the full extent is not well understood. A recent ransomware attack with the abrupt return to paper charting provided a unique opportunity to investigate the impact of the EHR on surgical residents' interprofessional communication. We sought to explore how surgical residents perceived communications during the 2-month period when the EHR was inaccessible.

DESIGN

General surgery residents who rotated through the regional tertiary referral medical center and level I trauma center were invited to participate in a semistructured interview about communication with one another, faculty, staff, and patients during the downtime. A grounded theory approach was used to analyze the data.

SETTING

Regional tertiary referral medical center and level I trauma center.

PARTICIPANTS

General surgery residents who rotated through the affected site.

RESULTS

Ten general surgery residents were interviewed. Interviews revealed that the abrupt loss of the EHR impacted communication in three major ways: (1) engendered more professional courtesy and collegiality, (2) prioritized bedside patient care over documentation demands, and (3) encouraged more explicit and deliberate communications.

CONCLUSIONS

Our study demonstrates that the loss of the EHR encourages surgery residents interprofessional communication. With healthcare becoming increasingly digital, active efforts should be made to preserve the communication benefits by optimizing existing and emerging technology to facilitate direct face-to-face interactions.