EHR installs carry huge financial risks, Moody’s says

http://www.healthcarefinancenews.com/news/ehr-installs-carry-huge-financial-risks-moodys-says?mkt_tok=eyJpIjoiTXpVelkyRXhZMkpqTmpKaSIsInQiOiJFVjFscVRVVDdXZmZqek02STNMSVNjelwvREEwMmZmckZrWmNyZjNrQnVcL0szTGZuNXA4ZGdrOGRhT1V5bnREanBwWitPbTNkQllLZW5BTmd4VDk5TDg0ak1NNStnTllqdEllQlNpQmRZbDUwcm5JdVNaZ1lJcmpVVXJNYWxcL0JcL28ifQ%3D%3D

Hospitals run the risk of incurring operating losses, lower patient volumes and receivables write-offs if there are problems, Moody’s says.

Rolling out new electronic health record systems puts hospitals at a significant risk of financial losses, according to a new report by credit rating firm Moody’s.

“Hospitals run the risk of incurring operating losses, lower patient volumes, and receivables write-offs if there are problems with adoption of a new EMR system,” Moody’s said in its Monday report.

Add to that the operational and financial disruptions that typically accompany complex IT projects, and hospitals could find themselves walking an even thinner financial margin than they are used to, Moody’s said.

“In a sample of hospitals that have recently invested in major EMR and revenue cycle system conversions, increased expenses and slower patient volumes contributed to a median 10.1 percent decline in absolute operating cash flow and 6.1 percent reduction in days of cash on hand in the install year,” Moody’s found.

The good news is that many hospitals returned to pre-install levels within a year, owing to strong risk management.

When Epic Systems founder and CEO Judy Faulkner talked with Healthcare IT News at HIMSS17 last February, she said Epic customers had done well financially. True, Epic EHR installations cost millions of dollars. However, from 2004 to 2015, she said Moody’s and Standard & Poor’s statistics showed that Epic customers reaped profitability unsurpassed by clients who implemented her competitors’ EHRs.

Despite the risks, hospitals will continue to invest in EHRs, Moody’s said. Hospital executives want to improve patient safety, clinical quality and provide decision support. IT will also continue to be a selling point in physician recruitment and retention, as new data reporting will be required by Medicare for professional reimbursement.

While hospitals may be exposed to a number of risks during massive IT rollouts, the threats that come with cyber attacks make them even more vulnerable, according to Moody’s.

As example, Moody’s points to Hollywood Presbyterian Medical Center in Hollywood, California, which acknowledged paying ransom after an attack in 2016.

Moody’s expects cybersecurity to become an even stronger focus than it already is.

“As IT investments represent a growing portion of hospital budgets, an increasing amount will be allotted to guarding confidential patient data, which make hospitals a prime target for cyberattacks and ransomware events,” according to Moody’s. “We expect cybersecurity to be a primary focus of hospital management teams and their boards, with annual capital and operating budgets allotting appropriate levels of expenditures to protect patient data and testing vulnerabilities.”

Foreign nation behind Anthem cyber breach, investigators say

http://www.healthcarefinancenews.com/news/foreign-nation-behind-anthem-cyber-breach-investigators-say

The cyber attacker who breached more than 78 million Anthem consumer records in 2015 was acting on behalf of a foreign government, according to the California Department of Insurance.

Anthem is paying more than $260 million dollars for security improvements and remedial actions in response to this breach, the department said in releasing the examination findings and settlement agreement Friday.

“In this case, our examination team concluded with a significant degree of confidence that the cyber attacker was acting on behalf of a foreign government,” said Insurance Commissioner Dave Jones, who was among seven insurance commissioners leading the national investigation.

Jones and the department did not name the foreign government nor identity of the attacker.

 

U.S., Canada issue joint alert on ‘ransomware’ after hospital attacks

http://www.reuters.com/article/us-cyber-ransomware-alert-idUSKCN0WY3BN?utm_campaign=KHN%3A+Daily+Health+Policy+Report&utm_source=hs_email&utm_medium=email&utm_content=27952388&_hsenc=p2ANqtz-8er4vMvLXZZme7-8-fNLl3T8JUYA-G-epy8OUSOcm9tpjIjfOyTF8K1gW0uy-5M6ZnqtwurcBtULgijKFEl3TeKCayyg&_hsmi=27952388

A man types on a computer keyboard in Warsaw in this February 28, 2013 illustration file picture. REUTERS/Kacper Pempel/Files