Could the technology behind Bitcoin help secure medical records?

by | Jan 15, 2023

Cyber security is a growing problem for healthcare providers, who often struggle to keep the records of their patients secure. Cyber insurance coverage is not generally mandated by law and many healthcare organizations remain uninsured, even though laws and regulations require them to implement certain security measures to protect sensitive data.

Devastating attacks

We don’t have to look far to see some sobering examples. In May 2017, the UK’s National Health Service (NHS) was hit by the ‘WannaCry ransomware attack’ causing widespread disruption and leading to the cancellation of thousands of appointments and surgeries.

In September that year, the US credit card reporting agency, Equifax was hit with a data breach that exposed the personal data of 143 million people, including birth dates, Social Security numbers, and addresses. The company also reported that some limited personal identifying information of certain individuals involved in healthcare was impacted.

The data breach resulted in Equifax reaching a settlement with the US Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB) of up to $700 million in fines, compensation, and credit monitoring services.

But these attacks are just the tip of the iceberg. Most cyber attacks go unreported, with the attacked organization quietly paying the ransom and hoping the data of their patients has not been compromised or shared.

While healthcare providers can act to protect their data and minimize the chance of an attack, they can never be guaranteed complete safety. But a savior may be on the way — coming from the unlikely world of Bitcoin — Blockchain technology.

Blockchain technology to the rescue

Blockchain technology is a decentralized, digital ledger that is used to record transactions across a network of computers. While it’s best known as the technology that underpins cryptocurrencies like Bitcoin, it can also be utilized for other purposes, such as securely storing and sharing medical data.

Blockchain’s resistance to tampering is due to the fragmented nature of the technology.
This is because each block in the chain contains a unique code, called a “hash,” that is based solely on the contents of the block. If any information in a block is changed, the hash will also change, which makes it immediately apparent that the block has been tampered with.
Data stored on the blockchain is distributed across the network, rather than being stored in a central location. This makes it almost impossible for hackers to access and steal the data.

Software developers working on blockchain

Several software developers have been working on blockchain solutions for medical records, including Metachain , who promote a solution in which patients are “at the center” of the system, with the ability to grant other users access to their electronic health records (EHR) or revoke that access by setting up a time limited gateway, “thereby improving their experience and guaranteeing data security.”

Other providers developing similar solutions include

  1. BurstIQ
  2. SimplyVital Health
  3. Guardtime, and
  4. Gem

Blockchain technology promises secure, decentralized medical records that can be easily shared between healthcare providers. It has the potential to improve the quality of care for patients by giving doctors and other healthcare professionals access to a more complete picture of a patient’s health history. Additionally, through the use of “smart contracts.” blockchain can help to ensure that patient data is only accessible to authorized parties, further improving the security of medical data.

Developers still face hurdles

Developers still face a number of hurdles however, including scalability, as the technology cannot currently handle large numbers of transactions quickly. This can lead to slow performance and high costs.

There are also incompatibility problems. As it is still in its early stages of development, different blockchain platforms may not be able to communicate with one another. This will make it almost impossible for healthcare providers to share medical data between different systems.

Even if those challenges are overcome and Blockchain gives us a secure universal platform for patient records, no organization can be completely safe while it is operated by humans  Weak passwords and employees downloading and installing ‘Trojans’ on computer systems will remain a doorway through which hackers will continue to pass.

The only real guarantee of safety, is for organizations to be covered with cyber liability insurance, sourced through a knowledgeable broker like the Westwood Insurance Group, who can match the policy to the specific needs of each healthcare provider.

Contact us now for more information.

Dale Nelson

Dale Nelson

Senior Broker, Westwood Insurance Group

Dale has worked in the insurance industry since leaving college, specializing in the healthcare niche. He has developed long-term relationships with insurance carriers and retailers in the Medical Professional Liability area. Dale has worked with carriers, retailers and brokers and so works effectively at helping agents solve problems for their clients.

Articles by Dale Nelson

Digital Healthcare and the Uncertain Malpractice Landscape

The digital healthcare revolution has taken the country by storm - an exciting new area, where opportunities abound for commercial agents. This rapid growth, was fueled by a combination of changing lifestyle trends, technological advancements and a shortfall in...

A lesson in Liability Insurance for Chiropractors

A visit to the chiropractor for a 32-year-old patient in Georgia recently led to a $75 million medical malpractice verdict. The claim related to emergency treatment the patient received after collapsing with a brainstem stroke, resulting from chiropractic manipulation...

Contact Dale Nelson now

Dale Nelson, Westwood team member

Dale is an insurance specialist with decades of experience. You can call him on the number below or fill out the form and he will get your message directly: