FEHBlog

Monday Roundup

Photo by Sven Read on Unsplash

From the Omicron and siblings front, STAT News reports

The Biden administration is preparing a sweeping initiative to develop a next generation of Covid-19 immunizations that would thwart future coronavirus variants and dramatically reduce rates of coronavirus infection or transmission, building on current shots whose impact has been mainly to prevent serious illness and death, the White House told STAT.

To kick off the effort, the White House is gathering key federal officials, top scientists, and pharmaceutical executives including representatives of Pfizer and Moderna for a Tuesday “summit” to discuss the new technologies and lay out a road map for developing them.

“These are vaccines that are going to be far more durable, that are going to provide far longer-lasting protection, no matter what the virus does or how it evolves,” Ashish Jha, the White House Covid-19 response coordinator, said in an interview. “If we can drive down infections by 90% … Covid really begins to fade into the background, and becomes just one more respiratory illness that we have to deal with.”

Here’s hoping. Curiously, the federal government did not start this effort last year when Delta was raging.

The Centers for Disease Control posted an information sheet on the Novovax vaccine. The FEHBlog was surprised to read “Novavax COVID-19 vaccine is not authorized for use as a booster dose.” The FEHBlog had read months ago that the Novovax vaccine would make a dandy booster to a series of mRNA shots.

Medscape discusses long Covid symptoms.

People who reported sore throats, headaches, and hair loss soon after testing positive for COVID-19 may be more likely to have lingering symptoms months later, according to a recent study published in Scientific Reports.

Researchers have been trying to determine who faces a higher risk for developing long COVID, with symptoms that can last for weeks, months, or years after the initial infection. So far, the condition has been reported in both children and adults, healthy people, those with preexisting conditions, and a range of patients with mild to severe COVID-19.

“These people are not able to do necessarily all the activities they would want to do, not able to fully work and take care of their families,” Eileen Crimmins, PhD, the senior study author and a demographer at the University of Southern California’s Leonard Davis School of Gerontology, told the Los Angeles Times.

“That’s an aspect of this disease that needs to be recognized because it’s not really as benign as some people think,” she said. “Even people who have relatively few symptoms to start with can end up with long COVID.”

From the Affordable Care Act front, the Department of Health and Human Services released today a proposed third version (Obama, Trump, Biden) version of a rule implementing Section 1557, the individual non-discrimination provision of the Affordable Care Act. Here are links to the proposed rule and the Department’s fact sheet. The law needs an implementing rule because its wording is garbled. The FEHBlog didn’t think he would ever see a more complicated rule than the Obama Administration’s 2016 rule, but at least at first glance, it appears that the Biden Administration has cleared that high bar. Later this week, the FEHBlog will offer his take on the extent of the rule’s application to the FEHBP. The public comment period will be 60 days long once the proposed rule is published in the Federal Register.

The Wall Street Journal has launched an investigative journalism campaign against certain large charitable hospitals.

Nonprofit hospitals get billions of dollars in tax breaks in exchange for providing support to their communities. A Wall Street Journal analysis shows they are often not particularly generous.

These charitable organizations, which comprise the majority of hospitals in the U.S., wrote off in aggregate 2.3% of their patient revenue on financial aid for patients’ medical bills. Their for-profit competitors, a category including publicly traded giants such as HCA Healthcare Inc., wrote off 3.4%, the Journal found in an analysis of the most-recent annual reports hospitals file with the federal government.

Among nonprofits with the smallest shares of patient revenue going toward charity care—well under 1%—were high-profile institutions including the biggest hospitals of California’s Stanford Medicine and Louisiana’s Ochsner Health systems. At Avera Health, a major hospital system in South Dakota, charity care was roughly half of 1% of patient revenue across all its 18 hospitals.

You get the gist. These Journal investigations usually attract attention on Capitol Hill.

From the public health front, the Washington Post discusses the meaning of a pre-diabetes diagnosis to the over 65 crowd.

More than 26 million people 65 and older have prediabetes, according to the Centers for Disease Control and Prevention. How concerned should they be about progressing to diabetes?

Not very, some experts say. Prediabetes — a term that refers to above-normal but not extremely high blood sugar levels — isn’t a disease, and it doesn’t imply that older adults who have it will inevitably develop Type 2 diabetes, they say.

“For most older patients, the chance of progressing from prediabetes to diabetes is not that high,” said Robert Lash, the chief medical officer of the Endocrine Society. “Yet labeling people with prediabetes may make them worried and anxious.”

Other experts believe it is important to identify prediabetes, especially if doing so inspires older adults to add more physical activity, lose weight and eat healthier diets to help bring their blood sugar under control.

Based on personal experience, the FEHBlog finds himself supporting “the other experts.”

From the OPM / FEHB front —

  • OPM today issues a fact sheet on the steps being taken to implement the President’s June 2021 Executive Order on increasing diversity, equity, and inclusion in the federal workforce.
  • FedSmith has an article encouraging federal annuitants to take look this Open Season at FEHB plans which offer an integrated Medicare Advantage. The number of those plans has been growing over the past two Open Seasons and the FEHBlog anticipates the number will continue to grow this coming Open Season.

From the telehealth front, mHealth Intelligence points out

The benefits of breastfeeding are well-documented. Breast milk is a comprehensive source of infant nutrition, can help stave off some short-and long-term illnesses, and enables babies to gain valuable antibodies from their mothers, according to the Centers for Disease Control and Prevention. Further, breastfeeding can reduce the mother’s risk of developing several conditions, including breast and ovarian cancer and type 2 diabetes.

Though a majority of babies are breastfed initially, there appears to be a drop-off at the six-month mark, and rates continue to decline from there. In total, about 84 percent of babies were breastfed in 2018, but only 57 percent were breastfed at six months and 35 percent at 12 months, according to CDC data.

To support breastfeeding, the five-hospital Trinity Health of New England system joined forces with Nest Collaborative last month to launch a telehealth program.

The telehealth-enabled breastfeeding support program, launched at the end of June, connects pregnant women and new mothers to a nationwide network of lactation consultants.

Nest Collaborative’s [lactation consultants] help families reach their breastfeeding goals and assist them in making informed decisions about infant feeding options,” said Judith Nowlin, CEO of Nest Collaborative, in an email.

Weekend update

Photo by Dane Deaner on Unsplash

From Capitol Hill, The House of Representatives and the Senate will be in session for Committee business and floor voting this week. This is the last week that the House is in session before the August recess. The Senate has one more week of legislative work before it heads off on its State work period for the eighth month of the year.

The Wall Street Journal adds

Congress nears the close of a packed legislative session this week, aiming to pass legislation providing about $54 billion to boost U.S. semiconductor manufacturing while also juggling a raft of other bills ahead of the monthlong August recess.

Along with the bipartisan bill subsidizing chips, Democrats are hoping to salvage a piece of President Biden’s once-ambitious domestic agenda, looking to advance a measure aimed at lowering some drug and healthcare costs. The party is also weighing whether to hold votes related to social issues and guns that could help rally the party’s base. * * *

In the Senate, Democrats are awaiting guidance from the Senate’s parliamentarian over whether a measure aimed at lowering drug costs by giving Medicare the right to negotiate prices for a narrow set of drugs will comport with the Senate’s procedures for passing bills through a budget-related process known as reconciliation. Democrats in the 50-50 Senate are using the special process because it allows the passage of bills with only a simple majority, instead of the 60 votes required for most legislation. The procedure is only available until Sept. 30, the end of the fiscal year.

Mr. Hoyer said that if Senate Democrats are able to soon pass the drug-pricing bill, which would also extend Affordable Care Act subsidies, then the House would return from its August recess to clear the measure in time for insurance companies to factor in the subsidies when they set prices for their plans.

From the Omicron and siblings front, the New York Times informs us

People with coronavirus infections of the Omicron variant often have significantly different viral levels in their noses, throats and saliva, and testing just a single type of sample is likely to miss a large share of infections, according to two new papers, which analyzed Omicron infections over time in a small number of people.

The papers, which have not yet been published in scientific journals, suggest that coronavirus tests that analyze both nasal and throat swabs would pick up more Omicron infections than those that rely on just a nasal swab. Although these combined tests are common in other countries, including Britain, none are yet authorized in the United States.

“You could get a lot more bang for your buck if you use these mixed specimen types,” said Rustem Ismagilov, a chemist at the California Institute of Technology and the senior author of both papers. But in the United States, he said, “we are stuck with nobody doing it.”

And yet the CDC has recorded nearly 90 million cases in our country.

From the unusual viruses front

STAT News reports

The World Health Organization on Saturday declared the unprecedented monkeypox outbreak that has spread around the world a public health emergency, a decision that will empower the agency to take additional measures to try to curb the virus’s spread.

In an unusual move, WHO Director-General Tedros Adhanom Ghebreyesus made the declaration even though a committee of experts he had convened to study the issue did not advise him to do so, having failed to reach a consensus. The same committee met just one month ago and declined to declare a public health emergency of international concern, or PHEIC [pronounced fake].

Secretary of Health and Human Services expressed his support for this decision.

Bloomberg Prognosis provides a quick take on monkeypox and its spread. Among other takes

The illness is usually mild and most patients will recover within a few weeks; treatment is mainly aimed at relieving symptoms. About 10-to-15% of cases have been hospitalized, mostly for pain and bacterial infections that can occur as a result of monkeypox lesions. The CDC says smallpox vaccine, antivirals, and vaccinia immune globulin can be used to treat monkeypox as well as control it.

The Wall Street Journal adds

Unusual for an emerging disease, there are already vaccines and treatments that can be used to counter monkeypox. That is because some governments have invested in developing defenses against the accidental or deliberate reintroduction of smallpox, a closely related but much more severe virus. Some countries hold these treatments and vaccines in national stockpiles, but they aren’t readily available everywhere.

In some places, including the U.S., U.K. and parts of Canada, broad groups of men who have sex with men are being offered vaccination in an effort to slow the spread, although vaccine supplies have so far been constrained. Public-health authorities also are working to raise awareness among men who have sex with men about the spread of monkeypox.

From the Medicare front, STAT News reports

The federal government is hashing out the details on a new type of rural hospital, and new developments suggest regulators want to make it an attractive option.

So-called Rural Emergency Hospitals (REH) will run emergency rooms, but won’t offer inpatient care. On top of bumped-up Medicare reimbursement, they’ll get facility payments north of $3 million annually, which is nothing to sneeze at for small hospitals. The new details were part of the government’s proposed Medicare payment rates for hospital outpatient services in 2023, released Friday [July 15].

For their part, hospitals aren’t yet sold on the idea.

From the Affordable Care Act front, we have Section 1557 news:

On Monday, July 25, 2022, [at 2:15 pm ET] the U.S. Department of Health and Human Services will announce a proposed rule to strengthen Section 1557 of the Affordable Care Act (ACA), which prohibits discrimination on the basis of race, color, national origin, sex, age, and disability in certain health programs and activities. 

In regard to sex, which includes sexual orientation and gender identity, the proposed rule would solidify protections against discrimination consistent with the U.S. Supreme Court’s holding in Bostock v. Clayton County.  

Strengthening this rule is a significant achievement for the Biden-Harris Administration and promotes gender and health equity and civil rights for communities of color, women, LGBTQI+ individuals, people with disabilities, persons with limited English proficiency (LEP), and seniors.

From the reports and studies department

  • Fortune Well tells us “While two-thirds of Alzheimer’s cases are in women, an overwhelming majority don’t know they are at an increased risk for the disease, a new survey finds. A survey conducted by the Cleveland Clinic last month found that while 71% of women respondents saw a doctor for their health in the last year, 82% of them did not know that they are at increased risk for Alzheimer’s disease and 73% percent had not talked to their doctor about their brain health.”

Early physician follow-up with a comprehensive transitional care strategy and effective chronic disease management after discharge was associated with reduced 90-day readmissions among patients with COPD and other complex conditions.

“This population-based retrospective cohort study found that early follow-up with a [primary care] physician or relevant specialist was associated with fewer readmissions for patients with [congestive heart failure] or COPD, fewer COPD-related readmissions for patients with COPD and lower mortality for patients with [congestive heart failure], all within 90 days of discharge, but that there was no demonstrable benefit at 30 days or for patients with [acute myocardial infarction],” Farah E. Saxena, MPH,researcher at the Canadian Partnership Against Cancer in Toronto, and colleagues wrote in JAMA Network Open.

  • The CDC reports “Adults who receive diabetes education follow more recommended preventive care practices, such as getting regular physical activity.” Many FEHB plans offer diabetes education services.

Cybersecurity Saturday

From Capitol Hill, Cyberscoop reports

The House Energy and Commerce Committee voted Wednesday [July 20] to advance sweeping privacy legislation with strong bipartisan support.

The American Data and Privacy Protection Act (ADPPA) [H.R. 8152] could see a full floor vote as early as next week, moving forward what would become the nation’s first comprehensive privacy law.

But some lawmakers and privacy experts are now alarmed the legislation may not address some of the most pressing issues related to consumer privacy — reining the massive growth in data brokers that buy and sell the public’s information and curbing potential abuse of commercial data such as reproductive health information. * * *

The American Data Privacy Protection Act isn’t the only potential mechanism for Congress to crack down on data brokers or the abuse of their services. For instance, [Sen. Ron] Wyden’s bipartisan and bicameral The Fourth Amendment Is Not For Sale Act [S. 1265 and H.R. 2738] would prohibit law enforcement from purchasing data that would otherwise require a warrant. House Judiciary leaders called for a markup of the bill at a hearing on Tuesday [July 19].

Several House Energy and Commerce Committee members made clear Wednesday that they would like to see additional discussion before giving the bill their support for a full floor vote. And even if it gets to the Senate, the bill faces strong resistance from Senate Commerce Chair Maria Cantwell, D. Wash., who has previously said she would not bring the bill for markup.

From the cyber breaches front, Health IT Security informs us

Fortified Health Security’s mid-year report on the state of healthcare cybersecurity observed slight shifts in healthcare data breach trends in the first half of 2022. The HHS Office for Civil Rights data breach portal showed that there have been 337 healthcare data breaches impacting more than 500 individuals each in the first half of this year, signifying a slight decrease from 368 at this time last year.

“While the number of healthcare cybersecurity reported breaches has leveled off after meteoric rises over the past several years, hospitals and health systems still cannot breathe a sigh of relief,” the report stated.

“The percentage of healthcare breaches attributed to malicious activity rose more than 5 percentage points in the first six months of 2022 to account for nearly 80 [percent] of all reported incidents.”

Reuters adds

Plaintiffs’ lawyers representing a class of millions of federal employees in a data-breach lawsuit against the U.S. [Office of Personnel Management] asked a Washington, D.C., judge on Thursday to award more than $8.5 million in legal fees for their work securing a $63 million settlement.

The class attorneys at San Francisco-based Girard Sharp, working with 14 other firms, said in a court filing that the “novelty and complexity” of the litigation, which began in 2015, justified the requested fee. * * *

A fairness hearing is scheduled for Oct. 14.

From the cyber vulnerabilities front —

Cybersecurity Dive reports

Threat actors are likely exploiting a critical vulnerability that surfaced in a pair of Confluence support apps after a hardcoded default password was leaked, Atlassian warned customers in an advisory update on Thursday [July 21].

The culprit, a default password for admin control on Atlassian’s Questions for Confluence app, allows attackers to gain access to unpatched servers. Atlassian released a patch for the vulnerability and advised all organizations running affected Confluence systems to update the app, disable or delete the default “disabledsystemuser” admin account.

The Cybersecurity and Infrastructure Security Agency Friday [July 22] issued an advisory to alert customers to the latest vulnerability impacting Confluence. “An attacker could exploit this vulnerability to obtain sensitive information,” the agency said.

HHS’s Healthsector Cybersecurity Coordination Center (HC3) shared a PowerPoint presentation on Web Application Attacks in Healthcare.

From the ransomware front —

Cybersecurity Dive reports

Affiliates of the LockBit ransomware group are infiltrating on-premises servers to spread malware on targeted networks, according to new research from Broadcom’s threat hunting team at Symantec.

Threat analysts observed a threat actor operating on a victim’s enterprise network with remote desktop protocol access for several weeks before it dropped and executed the LockBit ransomware. This type of sustained and undetected access allows attackers to conduct reconnaissance and identify weaknesses on networks before deploying payloads.

Attackers operating LockBit ransomware can leverage group policy management to spread the malware through a network, run commands and encrypt many machines almost simultaneously, Symantec’s researchers said.

Cyberscoop tells us

Typically, when it comes to ransomware, researcher and cybersecurity companies scramble after attacks to understand the origin of the malware that infected systems and locked crucial data. 

But researchers with Censys, a firm that indexes devices connected to the internet, said Thursday they’ve flipped the typical script and found what appears to be a ransomware command and control network capable of launching attacks, including one host located in the U.S.

Matt Lembright, Censys’ director of federal applications and author of the report, told CyberScoop that they came across the network after running a search through the company’s data for the top 1,000 software products currently observable on Russian hosts. After seeing Metasploit — penetration testing software frequently used for legitimate purposes — on just nine hosts out of more than 7.4 million, the team did some additional digging. 

The team eventually found two Russian-based hosts containing a combination of Acunetix, a web vulnerability tester, and DeimosC2, a command and control tool to use on compromised machines after exploitation.

The American Hospital Association reports

The Justice Department has recovered about $500,000 in ransom that a Kansas hospital and Colorado medical provider paid to state-sponsored North Korean hackers, the agency announced yesterday [July 19].

“Thanks to rapid reporting and cooperation from a victim, the FBI and Justice Department prosecutors have disrupted the activities of a North Korean state-sponsored group deploying ransomware known as ‘Maui,’” said Deputy Attorney General Lisa O. Monaco yesterday at the International Conference on Cyber Security. “Not only did this allow us to recover their ransom payment as well as a ransom paid by previously unknown victims, but we were also able to identify a previously unidentified ransomware strain.”

Federal agencies this month recommended U.S. health care organizations take certain actions to protect against the Maui ransomware threat. [See July 9 Cybersecurity Saturday post.]

And, of course, what would we do without Bleeping Computer’s The Week in Ransomware – headlined “Attacks Abound.”

From the cyberdefenses front —

Health IT Security points us to

Drafted by the Health Information Management Working Group, the Cloud Security Alliance (CSA) released new guidance on third-party risk management in healthcare.

Threat actors are increasingly using third-party business associates as easier entry points into customer networks. Once inside the network, the malicious hackers may be able to access sensitive health data, encrypt files, and deploy ransomware on organizations that the associate does business with.

Cybersecurity Dive discusses public-private efforts to build the cybersecurity workforce.

The National Cyber Workforce and Education Summit highlighted an ongoing push to help meet an urgent demand for qualified cybersecurity professionals. 

Cyberseek research shows there are more than 700,000 open cybersecurity jobs in the U.S. and organizations face serious challenges in finding a diverse pool of workers. There is also heightened pressure to defend against a recent surge in malicious cyber activity. 

A range of government agencies, private sector companies and nonprofit organizations have made commitments to recruit, train and encourage potential employees to pursue careers in cybersecurity. 

Organizations are also making an effort to better train students in math, science and related fields to better prepare the workforce of the future. 

In that regard, the article points out five programs to develop cybersecurity talent. What’s more, Govexec reports

Kiran Ahuja, director of the Office of Personnel Management, told lawmakers on Thursday [July 21] that her agency wants “to work with Congress to develop a governmentwide cyber workforce plan that puts agencies on equal footing in competing for cyber talent.”

Special cyber hiring and pay authorities at the Department of Homeland Authority create competition for talent among government agencies – something that needs to be addressed, she said along with Jason Miller, deputy director for management at the Office of Management and Budget.

“Congress passed a particular cyber talent program for DHS that has now become sort of … the king of programs within the federal government and other agencies are having to compete with that,” said Ahuja during a hearing of the House Oversight and Reform Committee’s Government Operations subcommittee.

Finally, Security Boulevard offers “defense against ransomware” tips.

Friday Stats and More

Based on the CDC’s Covid Data tracker and using Thursday as the first day of the week, here is the FEHBlog’s weekly chart of new Covid cases for 2022:

Weeks 1 – 15 reflect the rise and fall of Omicron. The subsequent weeks reflect the ongoing attack of Omicron’s subvariants or siblings as the FEHBlog refers to them. Although the subvariants are more contagious than Omicron, the siblings haven’t come anywhere near the number of infections that Omicron produced in a rather short time.

The CDC’s weekly review of its Covid statistics notes “As of July 20, 2022, the current 7-day moving average of daily new cases (125,827) increased 0.5% compared with the previous 7-day moving average (125,185).”

Here’s the CDC’s Chart of Daily Trends in new Covid hospital admissions

The CDC’s weekly review points out “The current 7-day daily average for July 13–19, 2022, was 6,180. This is a 4.7% increase from the prior 7-day average (5,902) from July 6–12, 2022.”

Here’s the FEHBlog’s weekly chart of new Covid deaths for 2022:

The CDC’s weekly review adds “The current 7-day moving average of new deaths (348) has decreased 9.5% compared with the previous 7-day moving average (384).

Oddly enough, while hospitalizations are rising but deaths aren’t, STAT News reports

For many immunocompromised patients, Evusheld was supposed to offer salvation, a way of protecting people who couldn’t respond to vaccines because their T cells and B cells were impaired  — perhaps by cancer, a genetic condition, or drugs taken for organ transplants. Many saw it as their path back to a pre-Covid life, or at least to seeing family and friends again after a two-year hermitage. 

Yet eight months after the Food and Drug Administration first authorized the treatment, only a tiny fraction of the roughly 7 million patients who might be eligible have received it.  Hundreds of thousands of doses sit on shelves in hospitals and infusion centers across the country, even as a new coronavirus variant rips through the population.

“I think it’s clear throughout the pandemic that lip service has been paid for protecting immunocompromised Americans, but actual policy delivery has failed time and time again,” said Matthew Cortland, a senior fellow at Data for Progress who has been tracking Evusheld distribution.

The manufacturer Astra-Zeneca has launched a direct-to-consumer ad campaign — the first for any Covid treatment.

Here’s the FEHBlog’s chart of Covid vaccinations distributed and administered from the beginning of the vaccination era — the 51st week of 2020 — through the 29th week of 2022:

The CDC’s weekly review comments

Overall, about 261.2 million people, or 78.7% of the total U.S. population, have received at least one dose of vaccine. About 223.0 million people, or 67.2% of the total U.S. population, have been fully vaccinated.* Of those fully vaccinated, about 107.5 million people have received a booster dose,** but 50.2% of the total booster-eligible population has not yet received a booster dose. * * *

According to CDC’s COVID Data Tracker, only about 34% of people who are eligible for a COVID-19 booster and about 29% of people ages 50 years and older who are eligible for a second booster have gotten one. Booster vaccination rates vary widely across the United States. In the Northeast and parts of the Midwest, 50% to 70% of eligible people have gotten a first booster in almost every county. Unfortunately, much of the Southeast and Southwest are in the 30% to 40% range. 

Here’s the CDC’s community level report from the weekly review:

As of July 21, 2022, there are 1,350 (41.9%) counties, districts, or territories with a high COVID-19 Community Level, 1,212 (37.6%) counties with a medium Community Level, and 658 (20.4%) counties with a low Community Level. Compared with last week, this represents an increase (+6.5 percentage points) in the number of high-level counties, a decrease (−2.0) percentage points) in the number of medium-level counties, and a corresponding decrease (−4.5) percentage points) in the number of low-level counties. 50 out of 52 jurisdictions* had high- or medium-level counties this week. Rhode Island and Maine are the only jurisdictions to have all counties at low Community Levels.

To check your COVID-19 Community Level, visit COVID Data Tracker. To learn which prevention measures are recommended based on your COVID-19 Community Level, visit COVID-19 Community Level and COVID-19 Prevention.

Finally, STAT News explores the following conundrum: “‘There’s no one long Covid’: Experts struggle to make sense of the continuing mystery,” and David Leonhardt writing in the New York Times offered his clear eyed view of the Covid situation in yesterday’s column.

Thursday Miscellany

Photo by Josh Mills on Unsplash

From the Omicron and siblings’ front —

MedPage Today reports “Second COVID booster shot boosted antibodies in Seniors — but small Israeli study did not determine how quickly response will wane.”

Becker’s Hospital Reviews tells us

At least 18 cases of the newest omicron subvariant BA.2.75 have been confirmed in seven U.S. states as of July 20, early disease surveillance data shows. 

Globally, researchers have identified 201 cases in more than a dozen countries as of July 12, according to data from outbreak.info, a platform that tracks data on coronavirus variants and is supported by the CDC and other national research groups. 

The subvariant has a large number of mutations that may make it more adept than BA.5 — the nation’s current dominant strain — at spreading quickly and evading immune protection. Experts say it’s still unclear whether BA.2.75 will compete against BA.5 or cause more severe illness, according to CNN.

This leads us to the Wall Street Journal’s editorial board comments

The President’s [Omicron] infection [disclosed today] demonstrates how hard it is to avoid the new and highly transmissible Covid variants. The White House has gone to great lengths to protect Mr. Biden, but there’s only so much staff can do if the President is going to do his job. 

Despite continuing pleas from the White House and public-health elite, vaccination by now provides little protection against transmission. * * * The evidence is that the vaccines do reduce the chances of getting serious Covid and being hospitalized, though many elderly patients who have been vaccinated are still dying from the virus.

While this quote is an opinion, not a news report, it struck a chord with the FEHBlog. The FEHBlog wishes the President a speedy recovery.

From the unusual viruses front, the Department of Health and Human Services offers a fact sheet on its response to the monkeypox outbreak.

In mergers and acquisitions news, Healthcare Dive informs us

Amazon has agreed to acquire primary care network One Medical for $18 a share, valuing the company at $3.9 billion.

The all-cash deal for San Francisco-based One Medical comes after months of speculation about a potential acquisition, reportedly drawing interest from companies including CVS Health, according to Bloomberg.

Analysts said a potential buyout for One Medical, which has grown rapidly since it was founded in 2007, could come at a significant premium. Amazon’s price of $18 a share represents a premium of 43% over its closing price of $10.18 a share on Wednesday.

STAT News explains why Amazon pursued adding One Medical to its healthcare portfolio.

With One Medical, Amazon is also tapping deeper into the vein of health care’s payment system. One Medical gets paid through two main avenues: commercial health insurers and Medicare. The Medicare side came from Iora, which One Medical bought for $1.4 billion last year.

Commercially insured patients, or those who get coverage through their jobs, are by far the most profitable within health care and overlap with a large chunk of Amazon’s subscription base. Even though One Medical focuses on less expensive primary care, there’s evidence One Medical charges some of the highest rates for those routine office visits and services, and that’s largely assisted by One Medical’s hospital partners.

Hospitals pay fixed sums to One Medical to care for patients, but they also “extend their health insurance contracts” to One Medical, the company said when it went public in 2020. The result: Hospitals that ink deals with One Medical get the most profitable patients in their market referred to them for more intensive services, and One Medical gets to piggyback off the lucrative payments that those dominant hospitals wring out of insurers.

STAT News concludes

Amazon’s success — and how disruptive it might prove to be to telehealth competitors — will depend in part on how well it integrates One Medical into its existing in-person and virtual offerings through Amazon Care. Analysts said that will become clear over the next year.

Whether it does draw patients away from traditional health care providers depends on their partnership with payers and their fees, said Aaron Neinstein, vice president of digital health for UCSF Health. “There’s no question that the One Medical annual fee is out of reach for most people in the U.S. Might Amazon change that or bundle it with Prime? Who knows.”F

Health Leaders Media reports that, notwithstanding the Federal Trade Commission’s nascent efforts,

Hospital and health system mergers and acquisitions in Q2 of 2022 have returned to trendlines that Kaufman Hall has been following since the beginning of the pandemic, the consulting firm said in its recently released M&A quarterly report.

During the second quarter of 2022, there were 13 hospital and health system M&A transactions, on-trend and only one transaction less than the 14 transactions reached in Q2 of 2021 and 2020. However, the total transacted revenue in the second quarter reached a “historic high” of $19.2 billion, more than doubling the $8.5 billion transacted revenue in the same quarter in 2021.

From the reports department and via Axios, the FEHBlog ran across this comprehensive McKinsey and Company report on the future of U.S. healthcare: what’s next for the industry post-Covid. Check it out.

From the Rx coverage front, DrugChannels calls our attention to this Amgen preview of 2022 trends in the biosimilars market. Adam Fein observes

As I predicted two years ago, the biosimilar boom is finally here. Prices are dropping while adoption accelerates. Prices are now declining by 9% to 22% annually. For therapeutic areas with biosimilars launched in the last three years, biosimilars’ market share averages 74%.  See Amgen slides 8 and 9.

Before the boom began, Dr. Scott Gottlieb, a former FDA commissioner, argued that we shouldn’t give up on biosimilars and prematurely regulate prices. As we can now see, Dr. Gottlieb was right. #NoTowel

From the SDOH front, Health Payer Intelligence explains

Race and ethnicity data collection is complex, but there are steps that health insurers—and the healthcare industry at large—can take to improve the process, according to a report from Urban Institute funded by Elevance Health (formerly Anthem).

From the miscellany department

  • Fierce Healthcare discusses a recent Fitch report on non-profit hospitals.

Labor, supply and capital cost increases have been rampant across the industry this year thanks to broader inflation pressures and other pandemic factors, the ratings agency wrote.

Reversing the margin trends will likely require nonprofit hospitals to take on a combination of rate hikes in the short term, “relentless” cost-cutting and productivity initiatives for the medium term and “transformational changes to the business model” for the long term, Fitch wrote.

Fortunately for those hospitals, many organizations already have the means to weather the storm as they overhaul their operations.

“The vast majority of our rated credits have strong balance sheets that will offset lower margins for a period of time and allow for operational improvements,” Fitch wrote. “Without more substantial changes to the current business model, or with additional coronavirus surges this fall or winter, this balance sheet cushion could eventually erode.”

Rate negotiations with payers will likely be an upward battle, the group wrote.

  • Healthcare Forefront points out the value of underutilized fentanyl test strips

Fentanyl test strips (FTS) are a simple, inexpensive, and evidence-based method of averting drug overdose. FTS are small strips of paper that can detect the presence of fentanyl in any drug batch—pills, powder, or injectables. This tool might be lifesaving for the teenager experimenting for the first time, the individual in the throes of a severe opioid use disorder, the concert-goer looking for a trip, the person using a preferred substance obtained from a new source, or the individual years into recovery. FTS also support the dignity and well-being of people who use drugs (PWUD), enabling them to make educated decisions about their safety.

And yet after years of press and discussions of the strips’ utility, FTS aren’t as widely available as one would expect them to be. It is time to take a more critical look at the importance of destigmatizing this tool and increasing its distribution and availability, while highlighting the grave risks in not doing so.

  • HealthDay gives us some good news.

U.S. hospitals became much safer places for patients over the past decade, with medical errors and adverse events declining significantly across the nation, federal government data show.

Between 2010 and 2019, patient safety dramatically improved among the four types of conditions for which people are most often hospitalized: heart attacks, heart failure, pneumonia and major surgical procedures.

“There has been a precipitous, very important drop in the number of these events, which to me validates the idea that these were preventable,” said senior researcher Dr. Harlan Krumholz, director of the Yale New Haven Hospital Center for Outcomes Research and Education in New Haven, Conn. “The status quo wasn’t written in stone. We have been able to actually make hospitals safer for those conditions.”

The new study relied on data gathered by the Medicare Patient Safety Monitoring Program, an effort created in the wake of a landmark 1999 Institute of Medicine report that drew national attention to patient safety in hospitals, the study authors said in background notes.

  • Fedweek reviews the steps that federal employees should take to position themselves for retirement.

Midweek Update

Mount Rushmore
Mt. Rushmore

From Capitol Hill, Govexec reports

The House [of Representatives on Wednesday voted 220-207 to pass the first minibus fiscal 2023 spending package, effectively endorsing President Biden’s plan to increase federal employees’ pay by an average of 4.6% next year.

The minibus contains six of the 12 annual appropriations bills, including transportation, housing and urban development; agriculture and rural development; energy and water development; military construction and veterans affairs; and financial services and general government, the last of which serves as the vehicle for provisions impacting federal employee compensation[, including the FEHBP].

In other news from our Nation’s Capital, Bloomberg tells us

The Biden administration is giving new powers to an office within the Health and Human Services Department to take a more prominent role in responding to public health crises, spanning from pandemics to natural disasters. 

HHS’s Office of the Assistant Secretary for Preparedness and Response will be renamed and enabled to “mobilize a coordinated national response more quickly and stably during future disasters and emergencies,” Dawn O’Connell, who heads the unit, said in a memo obtained by Bloomberg News. 

The office will be rebranded the Administration of Strategic Preparedness and Response and will be reclassified an operating division alongside other major health agencies like the Centers for Disease Control and Prevention and the Food and Drug Administration, according to the memo. Those agencies, along with the National Institutes of Health, have been criticized for their response and messaging since the outbreak of Covid-19 more than two years ago. 

In the memo, O’Connell wrote that the ASPR had taken on an increasingly important role during the pandemic and that the new designation would equip the unit with “greater hiring and contracting capabilities.”

From the Omicron and siblings front —

The American Hospital Association informs us

The Centers for Disease Control and Prevention last night endorsed the two-dose Novavax COVID-19 vaccine as a COVID-19 vaccine primary series for emergency use in adults, as recommended by its advisory committee. Authorized by the Food and Drug Administration last week, the protein-based vaccine offers an option to individuals who may have an allergic reaction to or prefer not to receive an mRNA vaccine.

CDC today updated its COVID-19 vaccine guidance to include the Novavax vaccine, and issued a chart summarizing the dosing schedules for all authorized or approved COVID-19 vaccines.

In other vaccine news, a new study by the National Institutes of Health comparing the effectiveness of COVID-19 vaccine boosters against the omicron variant found neutralizing antibody levels decreased substantially within three months, with the BA.4 and BA.5 sub-lineages up to 2.5 times less susceptible to neutralization. NIH said the results could help inform decisions regarding future vaccine schedule recommendations, including the need for variant vaccine boosting.

The Wall Street Journal reports

A serious inflammatory complication that strikes some children in the weeks following a Covid-19 infection has almost disappeared. A buildup of immunity and changes to the virus both likely play a part, pediatric infectious-disease doctors and researchers said.

Multisystem inflammatory syndrome is afflicting far fewer children as a proportion of known Covid-19 cases than during earlier waves of the pandemic, according to data from the Centers for Disease Control and Prevention. The condition, also known as MIS-C, is similar to Kawasaki disease, another rare pediatric inflammatory condition. Early in the pandemic, doctors believed they were seeing Kawasaki disease but soon recognized MIS-C as a distinct condition associated with an earlier Covid-19 infection.

MIS-C can cause inflammation two to six weeks after infection with Covid-19 in organ systems including the heart, lungs, kidneys and brain. Researchers haven’t determined why some children developed the condition but they have linked it to a hyperactive immune response. Treated with drugs such as intravenous immune globulin or corticosteroids, most children make a full recovery. Even so, the condition can be deadly. In the U.S., 70 children have died from MIS-C since the start of the pandemic, according to the CDC.

From the fraud, waste and abuse front —

Fierce Healthcare tells us

Federal prosecutors charged 36 defendants with committing a variety of alleged schemes to bilk Medicare using telehealth, as regulators continue to tinker with how to make the COVID-19 telehealth boom permanent.

The Department of Justice announced on Wednesday that the defendants allegedly engaged in a series of actions that led to $1.2 billion in medical fraud, with much of that coming from phony telehealth claims for advanced genetic testing and unnecessary medical equipment.

“Fraudsters and scammers take advantage of telemedicine and use it as a platform to orchestrate their criminal schemes,” said Luis Quesada, assistant director in the FBI’s Criminal Investigative Division, in a statement. “This collaborative law enforcement action shows our dedication to investigating and bringing to justice those who look to exploit our U.S. health care system at the expense of patients.”

Here’s a link to the HHS Office of Inspector General fraud alert which provides background on these telehealth schemes.

The Justice Department also announced

Inform Diagnostics, Inc., (Inform) formerly known as Miraca Life Sciences, Inc. (Inform), has agreed to pay $16 million to resolve allegations that it submitted false claims for payment to Medicare and other federal health care programs. 

Inform is a clinical laboratory headquartered in Irving, Texas, that provides anatomic pathology services to physician practices throughout the United States. On April 27, 2022, Fulgent Genetics purchased Inform, and the company is now a wholly owned subsidiary of Fulgent Genetics.

According to the settlement, Inform admits that, between 2013 and 2018, it routinely and automatically conducted additional tests on biopsy specimens prior to a pathologist’s review and without an individualized determination regarding whether additional tests were medically necessary. The United States contends that Inform’s policy of conducting routine additional tests caused Inform to perform many tests that were medically unnecessary. Inform submitted these medically unnecessary tests for payment, causing federal health care programs to pay for false claims. * * *

“Submitting claims for medically unnecessary tests threatens the integrity of the federal health care programs and wastes taxpayer dollars,” said Amy K. Parker, Special Agent in Charge of the Office of Personnel Management’s Office of Inspector General. “Today’s settlement is a reminder to all providers that the OPM OIG will not tolerate fraud against the Federal Employees Health Benefits Program.”

From the U.S. healthcare business front —

Fierce Healthcare informs us

Elevance Health subsidiary myNEXUS recently launched a post-acute care program for Medicare members in Indiana, and the insurance giant is aiming to take it nationwide over the next year.

During the company’s earnings call Wednesday morning, CEO Gail Boudreaux said it plans to take the next six to 12 months to scale up the program, which uses a capitated risk-sharing arrangement. The platform arms docs with technology tools that aim to optimize patient care post-discharge. * * *

The company reported $1.7 billion in profit for the second quarter of this year, down from $1.8 billion in the second quarter of 2021 or by 7.8%. Revenues for the quarter were up, however, increasing by 14.1% to $38.6 billion.

Healthcare Dive tells us

JPMorgan Chase’s healthcare venture arm plans to invest $30 million in Centivo, a health plan for self-funded employers. It’s Morgan Health’s third major investment in a startup looking to lower the costs of employer-sponsored healthcare in the past year.

Three-year-old health plan administrator Centivo contracts with providers on behalf of large employers with the goal of improving quality and efficiency. The startup, which ties payments to patient outcomes, says it saves employers 15% to 30% annually compared to traditional health plans.

Morgan Health has shelled out at least $85 million in the past year, including the Centivo deal. The unit invested $50 million in value-based primary care company Vera Whole Health in August and $5 million in healthcare navigation startup Embold Health in March.

From the U.S. general healthcare front —

  • Forbes offers an interesting article about health insurance literacy in our country. The No Surprises Act has spurred people to look more carefully at their healthcare provider bills, but their analyses fall short because they need help understanding those bills and health insurance coverage.
  • Yale New Haven Hospital’s July newsletter provides good advice on avoiding skin cancer and stay safe in the summer. The FEHBlog was born at the facility’s predecessor Grace New Haven Hospital.
  • STAT News reports “Gestational diabetes is on the rise, climbing 30% between 2016 and 2020, according to a new study published Tuesday by the Centers for Disease Control and Prevention. “There is a growing maternal health crisis in the United States, and gestational diabetes is an important and common complication that requires new focus,” said Sadiya Khan, an assistant professor of medicine and preventive medicine at the Northwestern University Feinberg School of Medicine, who was not involved in the new study. “That inflection point there is really striking and something that we’re going to want to follow up [on].” * * * “This issue does not resolve with the pregnancy and is really one that we need to focus on before, during, and after pregnancy for those at risk.”
  • STAT News also explores the work of various mental health crisis centers in the days following the launch of the nationwide 988 suicide / mental health crisis hotline. Here’s a link to an HHS site that refers to the hotline more appropriately as a LifeLine.

Tuesday’s Tidbits

Photo by Patrick Fore on Unsplash

From Capitol Hill Fierce Healthcare reports

Senate leadership said they reached a deal with centrist Sen. Joe Manchin, D-W.Va., to give Medicare narrow authority to negotiate lower drug prices and extend key Affordable Care Act subsides for another two years.

“We are excited about doing something on prescription drugs,” Schumer said during a press conference Tuesday. “This is something we have waited for.”

Centrist Sen. Joe Manchin, D-W.Va., had reached a narrow deal to give Medicare the power to negotiate for lower prices on up to 10 drugs in 2026 and up to 20 drugs starting in 2029. The package includes a host of other reforms that include a $2,000 cap on out-of-pocket drug costs.

The deal released earlier this month would also repeal a controversial Trump-era rule that stripped Part D rebates of their safe harbor from prosecution under federal anti-kickback laws. 

It now includes a two-year extension of a boost to ACA subsidies that has helped fuel record-breaking enrollment of more than 14 million people.

The Senate majority leader plans to move this legislation via the reconciliation process which means the Senate Parliamentarian must confirm that the bill meets the standards for the reconciliation approach.

STAT News adds that the Senate majority leadership has encountered problems from across the aisle in obtaining passage of the must-pass Food and Drug Administration users fee bill which helps fund the thousands of FDA experts who process drug review requests. Absent the necessary user fee funding, these folks will be furloughed.

From the Omicron and siblings front

AHIP tells us

Today the Centers for Disease Control and Prevention’s Advisory Committee on Immunization Practices (ACIP) unanimously voted to recommended the use of the Novavax two-dose COVID-19 vaccine as a primary vaccine series for adults 18 years and older.  The two dose series is recommended to be administered by intramuscular injection with 3-8 weeks between doses depending on the patient risk and immunocompetency status.

The Committee reviewed data showing the vaccine is approximately 90.4% effective in preventing mild, moderate or severe COVID-19 and 79% effective in a subset of people aged 65 years or older. Additionally, the vaccine had favorable safety data that showed mild side effects. Committee members noted the hope that Novavax’s traditional protein-based vaccine will help to convince the 10-13% of adults who remain unvaccinated to receive a COVID-19 vaccine.

Members also expressed concerns about vial size, potential discard waste, and lack of an expiration date on the vial or carton, with clinicians needing to go to NovavaxCovidVaccine.com to get expiration date. The committee clearly stated that the vaccine is not recommended to be used in combination with other COVID-19 vaccines for primary or booster series completion at this time.

The FDA granted the Novavax vaccine an emergency use authorization on July 14. CDC Director Walensky is expected to make an official recommendation statement on Novavax in the coming day.

The Wall Street Journal reports that natural immunity from contracting Covid, typically has lasts 90 days. However, the highly contagious and current king of Covid infections, Omicron BA.5, can bear natural immunity based on an earlier strain of Omicron. Rest assured that your natural immunity can be expected to last 90 days when you contracted Omicron BA.5.

Also from the public health front,

The New York Times reports on the difficulties that New Yorkers infected with monkeypox have encountered when they seek treatment for that disease.

“What many of us learned in medical schools is that monkeypox is a mild, self-limiting illness,” said Dr. Mary Foote, medical director of the office of emergency preparedness and response at the city’s Department of Health, speaking at a Thursday briefing hosted by the Infectious Diseases Society of America. “But the reality on the ground is that a lot of people with this infection are really suffering.”

What’s also striking, she said, about this outbreak, is “how many of these patients have had difficulty getting the care they need to treat these symptoms.”

STAT News adds

[E]ven as global health officials race to curb spread of the virus, most experts polled by STAT said they don’t believe it will be possible to contain it.

Not everyone is categorical — or pessimistic.

Rochelle Walensky, director of the Centers for Disease Control and Prevention, and Rosamund Lewis, the World Health Organization’s technical lead on monkeypox, expressed the belief that with a lot of effort, transmission in the population of men who have sex with men can be stopped.

Walensky’s optimism in this case derives from the fact that, to date, the virus appears to be spreading mainly within a defined community — one that has mobilized to get out the word of the risk its members face.

“Within this community there was a lot of high-risk [exposures] before we were able to test enough, educate enough, both on the provider side and the patient side. And there’s a lot of that happening right now,” Walensky said.

Healio notes

In June, HHS began shipping orthopoxvirus tests to five commercial laboratory companies — Aegis Science, Labcorp, Mayo Clinic Laboratories, Quest Diagnostics and Sonic Healthcare — to increase monkeypox testing capacity and access. As of Monday, they all have begun testing, the most recent being Sonic Healthcare. * * *

In addition to increased testing, the CDC has issued travel alerts and expanded access to vaccines in response to the outbreak. HHS also ordered an additional 2.5 million doses of Bavarian Nordic’s Jynneos vaccine to strengthen preparedness. This followed an earlier order made for 2.5 million doses that will begin arriving over the next year and will bring the federal stockpile of vaccine to treat monkeypox to nearly 7 million doses by mid-2023.

Medscape reports

Overdose deaths continued increasing in 2019-2020, especially among Black and American Indian/Alaskan Native (AI/AN) individuals, the CDC reported Tuesday.

Overdose deaths in the U.S. increased by about 30% during that period, said Mbabazi Kariisa, PhD, MPH, a health scientist in the CDC’s Division of Overdose Prevention, during a phone briefing with reporters. “We know that health disparities play a key role in overdose death rates among people in certain racial and ethnic minority groups. In just 1 year, overdose death rates increased 44% for Black people and 39% for American Indian and Alaskan Native people.”

STAT News tells us “The deaths were broadly driven by illicit fentanyl, CDC officials said, though deaths attributed to other drug types, including stimulants like methamphetamine, have also been rising in recent years.”

In advocacy news, MedPage Today discusses the American Medical Association President Jack Resneck’s campaign to tie physician burnout to prior authorization and other health insurer hassles. It’s unfortunate that the various health care professional and trade associations can’t work together to reduce healthcare spending while improving quality.

In that regard, Kaiser Health News reports

Fresh off the Federal Trade Commission’s successful challenges to four hospital mergers, the Biden administration’s new majority on the commission is primed to more aggressively combat consolidation in the health care industry than it has in past years.

Although hospital mergers were supposed to improve cost efficiency, experts agree that the creation of huge conglomerates and hospital networks has driven up U.S. medical costs, which are by far the highest in the world. Many enjoy near-monopoly pricing power. * * *

Extensive research has found that prices rise when hospital systems acquire or merge with their competitors or when they buy a significant percentage of physician practices in their market. Highly consolidated markets, such as Northern California (dominated by Sutter Health) and western Pennsylvania (dominated by UPMC) tend to have higher prices.

The FTC has a long history, under both Democratic and Republican administrations, of antitrust enforcement actions to block so-called horizontal mergers between hospitals that could stifle competition in a market.

Monday Roundup

Photo by Sven Read on Unsplash

From the Omicron and siblings’ front

  • The CDC’s Advisory Committee on Immunization Practices will take up the FDA’s grant of emergency use authorization to the Novovax traditionally developed Covid vaccine tomorrow.
  • The American Hospital Association tells us “Two doses of the Pfizer or Moderna COVID-19 vaccine were less effective at preventing hospitalizations during the omicron BA.2 and BA.2.12.1 periods than during the BA.1 period, but a third and fourth dose provided additional protection to eligible adults, the Centers for Disease Control and Prevention reported Friday.”
  • “Getting vaccinated now will not prevent you from getting an authorized variant-specific vaccine in the fall or winter when they are recommended for you,” CDC said. “Given recent increases in deaths and hospitalizations associated with the BA.5 variant, everyone should stay up to date with recommended COVID-19 vaccinations, including additional booster doses for those who are moderately to severely immunocompromised and adults over 50.”

Also from the public health front, Medscape reports

Iron accumulation in the brain as a result of alcohol consumption may explain why even moderate drinking is linked to compromised cognitive function.

Results of a large observational study suggest brain iron accumulation is a “plausible pathway” through which alcohol negatively affects cognition, study Anya Topiwala, MD, PhD, senior clinical researcherNuffield Department of Population Health, University of Oxford, Oxford, England, told Medscape Medical News.

Study participants who drank 56 grams of alcohol a week had higher brain iron levels. The UK guideline for “low risk” alcohol consumption is less than 14 units weekly or 112 grams.

The study was published online June 14 in PLOS Medicine.

The National Institutes of Health announced

Research supported by the National Institutes of Health shows that cardiovascular-related deaths have declined over the past two decades, but disparities remain. Researchers found that inequities are mostly driven by differences in race and ethnicity, geographic location, and access to care, among other factors. The findings were published in Circulation, and the research was partially funded by the National Heart, Lung, and Blood Institute (NHLBI), part of NIH.

In one paper(link is external), researchers analyzed data from the Centers for Disease Control and Prevention and found that, after adjusting for age, rates of cardiovascular disease-linked deaths dropped among Black and white adults between 1999 and 2019, as did heart disease-related disparities between the two groups. However, Black adults continue to experience higher death rates than white adults, especially in rural or segregated areas, according to the researchers.   

From the Medicare front, Healthcare Dive informs us

Federal health regulators want to increase hospital outpatient payments by 2.7% for 2023, an increase of about $6.2 billion in Medicare payments from this year.

Yet, the American Hospital Association is “deeply concerned” about the proposed Medicare payment rate amid increased inflation. 

“A much higher update is warranted,” AHA Executive Vice President Stacey Hughes said in a Friday statement following the release of the proposed 2023 Hospital Outpatient Prospective Payment System rule.

Circular logic, like the AHA’s here, feeds inflation in the FEHBlog’s view.

From the U.S. healthcare business front, MedPage Today reports “A growing demand for specialty services is once again spurring a bump in starting salaries for specialty physicians, according to a new report from AMN Healthcare and its physician search division, Merritt Hawkins. ‘Demand for physicians, and the salaries they are offered, have rebounded dramatically from the height of COVID-19,’ AMN’s president of physician permanent placement, Tom Florence, said in a statement. ‘Virtually every hospital and large medical group in the country is looking to add physicians.'”

From the health insurance literacy front, Benefits Pro observes

Despite spending more than $1 trillion on health insurance each year, many U.S. consumers are making poorly informed decisions – and paying for their lack of understanding.

According to the latest Health Insurance Literacy Survey from HealthCare.com:

* 1 in 4 Americans say lack of health insurance understanding caused them to receive a higher-than-expected medical bill.

* Half believe that copays count toward deductibles when they generally do not.

* Half of the respondents say they can’t afford health insurance without employer coverage.

* 3 in 10 stay in jobs they don’t like or take jobs they don’t want so they can receive health insurance.

The survey of 1,000 consumers younger than 65 identified several broad areas of concern, including confusion and complexity and unfounded confidence.

Weekend update

Thanks to Alexandr Hovhannisyan for sharing their work on Unsplash.

The House of Representatives and the Senate are in session this week for Committee business and floor voting. This is the House’s last week of scheduled floor voting before the August recess.

The Wall Street Journal reported last Friday evening

President Biden signaled he was prepared to support a narrow bill that lowered prescription drug costs and extended Affordable Care Act subsidies but left out climate provisions, as Senate Democrats grappled with whether to abandon their broader economic agenda after intraparty talks hit an impasse.

Mr. Biden said that if the Senate didn’t move forward with climate legislation, he would turn to executive action, calling clean energy and combating climate change urgent matters. On the prescription drug portion of the agenda, he said the Senate “should move forward, pass it before the August recess, and get it to my desk so I can sign it,” characterizing it as a major victory for American households.

The statement came a day after talks between Sen. Joe Manchin (D., W.Va.) and Senate Majority Leader Chuck Schumer (D., N.Y.) broke down. Mr. Manchin told Mr. Schumer that he would back a prescription-drug proposal but couldn’t yet commit to backing tax increases or climate provisions, citing inflation worries.

From the Omicron and siblings front, NPR tells us

The BA.5 omicron subvariant, which is now the most prevalent coronavirus strain in the United States, is four times more resistant to COVID-19 vaccines, according to a new study.

The strain, which is considered “hypercontagious,” according to the Mayo Clinic, is more defiant against messenger RNA vaccines, which include Pfizer and Moderna.

The BA.5 strain represented 65% of cases from July 3 to 9, according to data from the Centers of Disease Control and Prevention. 

It is contributing to increases in COVID-19 hospitalizations and admissions to intensive care units across the country. 

But vaccines still provide much better protection than going without the safeguards.

Bloomberg Prognosis adds

Bertha Hidalgo, a University of Alabama epidemiologist, was faked out by a variant that never truly got off the launchpad.

“A few weeks ago, I thought BA2.12.1 would drive the summer wave and it would be a small wave, with not too many infections, to be followed by a BA.5 wave when schools reopened,” she says.

Instead, the BA.5 omicron variant decided that the summer of 2022 was its time to shine. The variant is now dominant in the US, according to the Centers for Disease Control and Prevention. Combined with BA.4, it is also powering a surge of the virus in Europe. 

This week, World Health Organization chief Tedros Adhanom Ghebreyesus warned that “new waves of the virus demonstrate again that Covid-19 is nowhere near over.”

The good news is that we now know much more about what strategies are effective for reducing spread of the virus as we go about our lives in these very odd times.

Hidalgo shared her list of best practices:

* Get vaccinated and get all available boosters

* Wear a mask indoors (and outdoors if in crowded spaces)

* Make sure to get a good quality, good fitting mask, like a KN95 

* Use rapid tests before gathering with others, or at the sign of any questionable symptoms

* If gathering indoors, consider improving ventilation through measures like opening windows or running a central HVAC system

“All of these are layers of protection we can take advantage of that are preventive and can help reduce chances of infection and transmission,” she says.

Quite honestly, the FEHBlog relies on vaccines, including boosters, and rapid tests along with common sense.

HR Dive informs us

Employers must now justify mandatory coronavirus testing for workers, the U.S. Equal Employment Opportunity Commission said in a July 12 update to its technical assistance manual.

Until now, the commission took the position that the Americans with Disabilities Act standard for medical examinations always permitted employer worksite COVID-19 testing. 

Going forward, employers will need to assess whether current pandemic circumstances and individual workplace circumstances justify testing to prevent workplace transmission, the agency said. Specifically, an employer must show that testing is job-related and consistent with business necessity, as defined by the ADA.

From the unusual viruses front, Govexec brings us a CDC update on monkeypox. Here are links to

From the U.S. healthcare business front, Fierce Healthcare offers 21st Century advice on improving health plan call centers.

From the mental healthcare front, NPR takes a deep dive into the new 988 suicide and mental health crisis number.

From the HIPAA privacy and security rule enforcement front, HHS’s Office for Civil Rights announced “the resolution of eleven investigations in its Health Insurance Portability and Accountability Act (HIPAA) Right of Access Initiative, bringing the total number of these enforcement actions to thirty-eight since the initiative began.  OCR created this initiative to support individuals’ right to timely access their health records at a reasonable cost under the HIPAA Privacy Rule.” All of the chastised parties were healthcare providers.

This morning the FEHBlog was doing his weekly quality review of the FEHBlog. He noticed that last Thursday, he mentioned a new Kaiser Family Foundation report without providing a topic or a link for his readers. Lo siento. Here is the missing information:

Pregnancy is one of the most common reasons for a hospitalization among non-elderly people. In addition to the cost of the birth itself, pregnancy care also involves costs associated with prenatal visits and often includes care to treat psychological and medical conditions associated with pregnancy, birth, and the post-partum period.

This analysis examines the health costs associated with pregnancy, childbirth, and post-partum care using a subset of claims from the IBM MarketScan Encounter Database from 2018 through 2020 for enrollees in large employer private health plans. It finds that health costs associated with pregnancy, childbirth, and post-partum care average a total of $18,865 and the average out-of-pocket payments total $2,854. The analysis also examine how pregnancy, childbirth, and post-partum health spending among large group enrollees varies by the type of delivery.

The analysis can be found on the Peterson-KFF Health System Tracker, an information hub dedicated to monitoring and assessing the performance of the U.S. health system.

Childbirth also is one of the required out-of-pocket cost requirements for a health plan’s ACA summary of benefits and coverage template.

Cybersecurity Saturday

From the cybersecurity policy front, Cyberscoop reports

An amendment that includes cyber protections to defend “systemically important” critical infrastructure — such as large energy utilities, telecom providers and major financial institutions — won adoption in the U.S. House of Representatives Thursday.

The legislation is an outgrowth of the work of the Cyberspace Solarium Commission, which originally recommended a model similar to that envisioned in the bill. It mandates that the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) designate infrastructure needed for “national critical functions,” with operators at designated entities required to report to CISA the national cyber director on their management of cyber risk.

Designation will require organizations to disclose risk management strategies for critical assets and supply chains; share and receive threat intelligence with the government, and allow federal agencies to examine operations and assess performance-based security goals.

The amendment was made to the must-pass annual National Defense Authorization Act by voice vote. The Senate is working on its own version of the FY 2023 NDAA.

Cyberscoop adds, “The U.S. Chamber of Commerce criticized the amendment as written and sent a letter to all House members Wednesday, noting that many businesses’ “core policy goals” are not acknowledged, including legal liability protections and national preemption of state cybersecurity and protection laws.”

Health IT Security informs us

In its first-ever report, the Cyber Safety Review Board (CSRB) labeled Log4j (CVE-2021-44228) as an “endemic vulnerability” and said that vulnerable instances of Log4j could remain in systems for “a decade or longer.”

President Biden established the Cyber Safety Review Board in February 2022 as part of the administration’s executive order (EO 14028) on improving the nation’s cybersecurity. The Board is made up of 15 cybersecurity leaders from the federal government and the private sector and functions to review major cyber events and make suggestions for improving security in the private and public sectors.

For the report, CSRB reviewed instances of Log4j exploitation by engaging with approximately 80 organizations to gain an understanding of how organizations dealt with and are still dealing with Log4j.

Cybersecurity Dive explains

The [open source Log4j] vulnerability made it easy for threat actors to take control of compromised systems, and, since it was so difficult to spot without a comprehensive Log4j “customer list,” organizations struggled to identify and remediate it, according to the board. 

What made the vulnerability particularly disruptive is that a third party disclosed the flaw before the Apache Software Foundation, which supports Log4j, could create a fix, the review board said. A race between threat actors and companies to exploit or fix the vulnerability ensued.

Log4j highlighted how the open source community, often composed of volunteers, has inherent risks stemming from resource constraints. In response, the board called for public and private sector stakeholders to create a hub of centralized resources to better support the open source community. 

The board’s recommendations echo what the security industry has taken up as a battle cry in the last year: the software industry needs to change to create a better model of vulnerability management. 

Nextgov adds

[The CSRB] has said all it plans to say on the incident referred to as “SolarWinds,” under an executive order mandate. That order came in response to the intrusion event’s compromise of several federal agencies and high-profile tech companies.

“We have fully complied with the executive order,” said Rob Silvers, undersecretary for policy at DHS. “The White House and the Department of Homeland Security together determined that when the board was launched, that at that point in time, the best use of the board’s expertise and resources was to examine the recent events involved in the Log4j vulnerability.”

Cybersecurity Dive reports

A decades-old ambition to foster a worldwide, open, secure and interoperable internet hasn’t materialized. In lieu of that, cyberspace is more fragmented, less free and more dangerous, the Council on Foreign Relations wrote this week in a report.

The U.S. is losing the cyberspace race because it remains too rigidly focused on achieving traditional American values, such as global openness, to the detriment of domestic privacy legislation, the report said. Adversaries have exploited this weakness with alarming precision and are now projecting power and exerting influence in the digital realm.

Meanwhile, federal authorities are still organizing efforts for a more cohesive and effective response by identifying roles and responsibilities in government, and strengthening collaboration between agencies and enterprises.

Many challenges remain unmet. National Cyber Director Chris Inglis, during a keynote at last month’s RSA Conference, estimated the U.S. is about four-fifths of the way there before it can effectively “crowdsource [transgressors] the way they’ve crowdsourced us.”

NIST announced activating its brand new SP 800-53 Public Comment Site. Learn more about the SP 800-53 Comment Site, and leverage the online User Guide for step-by-step instructions on how to participate in the public comment process, available under “View Candidates” and “Provide comments on candidates.” NIST 800-53 is the only NIST publication mentioned in the OPM standard FEHB contracts.

From the cyber vulnerabilities front —

  • HHS’s Healthcare Cybersecurity Coordination Council (HC3) released its report on June 2022 vulnerabilities of interest to the healthcare sector.
  • Cybersecurity Dive reports “U.S. companies are facing an enormous challenge in managing enterprise security, as almost half of all endpoint devices — including computers and other mobile devices — cannot be detected by IT departments or they are running on outdated operating system software, according to a study from Adaptiva and the Ponemon Institute released [last] Wednesday.” 
  • Cybersecurity Dive also tells us, “Brute-force attacks remain, overwhelmingly, the most common threat vector for cloud service providers, comprising 51% of all attacks in the first quarter of 2022, according to analysis from Google Cloud. Threat actors automatically scan for and compromise misconfigured cloud services, but the continued use of weak or default passwords poses the greatest risk, Google’s Cybersecurity Action team concluded in its latest Threat Horizons report.”

From the ransomware front — while The Week in Ransomware’s writer is evidently on summer vacation, Bleeping Computer does alert us

Hackers are impersonating well-known cybersecurity companies, such as CrowdStrike, in callback phishing emails to gain initial access to corporate networks.

Most phishing campaigns embed links to landing pages that steal login credentials or emails that include malicious attachments to install malware.

However, over the past year, threat actors have increasingly used “callback” phishing campaigns that impersonate well-known companies requesting you call a number to resolve a problem, cancel a subscription renewal, or discuss another issue.

When the target calls the numbers, the threat actors use social engineering to convince users to install remote access software on their devices, providing initial access to corporate networks. This access is then used to compromise the entire Windows domain [by implementing ransomware code].

From the cybersecurity defense front —

  • Cybersecurity Dive discusses the challenges facing mid sized employers. For example, “The rising cost of cyber insurance continues to be an issue for mid-sized companies. Research shows almost half of all the companies surveyed saw rate increases of 76% or more during the past year.”
  • Speaking of which Cybersecurity Dive also reports, “The “vast majority” of cyber insurers plan to remain in the market over the next three years as the industry establishes an operations baseline to cope with very high claim volume, research from Panaseer released this week shows.  * * * [T]o keep up with demand, cyber insurers acknowledge the need to rethink the underwriting process. Nine out of 10 respondents want to create a consistent, metric-based approach to measuring an organization’s cyber risk, the survey of 400 cyber insurance decision makers shows.”