Slashdot Mirror


Chinese Hackers Targeted Insurer To Learn About US Healthcare (engadget.com)

hackingbear writes: When Anthem revealed a data breach that exposed the details of more than 80 million people, the incident raised a lot of questions: who would conduct such a hack against a health insurance firm? Investigators finally have some answers... and they're not quite what you'd expect. Reportedly, the culprits were Chinese hackers helping their nation understand how US medical care works. It may be part of a concerted campaign to get ready for 2020, when China plans to offer universal health care. Next, we should outsource politicians from China to fix our healthcare system.

28 of 157 comments (clear)

  1. Help by Anonymous Coward · · Score: 2, Funny

    Well now they have figured it out can they clue the rest of us in?

    1. Re:Help by viperidaenz · · Score: 4, Insightful

      They were trying to figure out how not to do it.

    2. Re:Help by arglebargle_xiv · · Score: 2

      That was my response too, if you want to see how not to do it, look at the US. For a country like China (socialist, centrally-controlled), look at countries in Scandinavia for your model on successful healthcare.

  2. Good Luck with that by Crashmarik · · Score: 4, Insightful

    Insurers exist to prevent people from understanding how healthcare works.

    1. Re:Good Luck with that by KGIII · · Score: 2

      No... They're learning what NOT to do so as to avoid the mistakes made in the US. Also, because the security that Anthem had was shit.

      Me? I can go to the VA for a lot of stuff. Because of my knee and back, I'm told I'm likely eligible for some sort of disability but I haven't looked in to it. I usually just go to the local doctors down in Farmington. I pay cash (well, use a debit card) and I don't think it's that expensive but I don't really have much in the way of health issues that I worry about. I had them run a fairly standard blood screen, redo my shots, and hit me with preemptive antibiotics prior to going on my latest adventure (just meandering around the country by car) and I think the total was $180 and that included the blood work.

      I'm not positive how it all works but I think they give me a discount for using cash. I have no idea how much it is. Farmington Family Practice has an online site somewhere as well as Franklin Memorial Hospital. Those are usually where I go and I think they make some financing information available but it's too much effort to Google for you guys. ;-)

      There is some sort of co-op? I'm not positive but I think I'm a member by grace of residency. The doctors all work together, are all tied in with the local hospital, and everything is pretty simple. It's a pretty small hospital in a pretty small town but they're actually being studied to be used as a model for other hospitals according to a placard they had on the wall. They used to operate, the doctors - or some of them, out of a different building but a remodel put a goodly number of them into a separate area of the building and the whole campus is pretty well connected.

      Which leads me to this... They do have electronic patient records. I can get them on a USB drive if I want. I understand that they have them on a separate, non-public-facing network and that they can transfer records over a separate network to other facilities, as needed, with just a little work. The whole campus is on the second network and the first network, the computers are entirely air-gapped as far as I know. You physically need to use two separate computers to move data from one network to the other.

      Yes, this is more difficult. Yes, I'm sure it costs more but it doesn't seem to cost a whole lot - as is evidenced by the prices that I pay. Why is this not standard practice? It has to be cheaper to insulate yourself than to deal with the outcomes of a hack that exposes personally identifiable information. I'm not an overly huge fan of regulation but, perhaps, there needs to be some motivation to ensure this data is kept secure - what happened to HIPPA? Perhaps we don't need to regulate how they do it but to fine them if there's a lapse in their security that causes a large-scale loss of data?

      Breeches are inevitable - they're unpreventable. Keep that shit off the network. Lock down terminals. Make sure the data loss can only be via complex or analog methods. I'm sure that you guys can think of all sorts of ways to fix this, I'm certainly not an expert but I know there are tools to mitigate the risks and I know some of the best practices. I think FMH (I've talked with the IT staff on numerous occasions) even prevents USB access on most machines, everything on the second network is wired, it's locked down by MAC address, people are logged out automatically, not everyone has access, and even still - long and complex passwords are required as far as I know. On top of that, none of the computers that are able to access this are in areas where a non-employee should be able to access it.

      The billing department doesn't need to be able to surf Facebook while on her break - not from hospital-owned computers. The receptionist doesn't need to have access to your records. These are isolated and disparate networks. I'm sure, with some work, I can do all sorts of mean stuff - they're running Windows and they allow me to bring in a USB key (for example) to get my records. There's a flaw right there - or a potential f

      --
      "So long and thanks for all the fish."
    2. Re: Good Luck with that by easyTree · · Score: 2

      Nice post. It could use a table of contents though :P

    3. Re: Good Luck with that by KGIII · · Score: 2
      1. TL;DR
      2. Rant
      3. Rant some more
      4. Off-topic
      5. Personal involvement
      6. Rant
      7. Rant
      8. Say sorry for rant and then not change anything
      9. TL;DR

      Slashdot seems to have changed the way Ordered Lists are done but, there you go. ;-)

      --
      "So long and thanks for all the fish."
  3. Let me save you some trouble... by Anonymous Coward · · Score: 4, Funny

    " Reportedly, the culprits were Chinese hackers helping their nation understand how US medical care works. "

    If you're rich, you pay for your medical care out of pocket.

    If you're not rich, you pay for health insurance that doesnt cover anything and then you die.

    1. Re:Let me save you some trouble... by ArmoredDragon · · Score: 3, Interesting

      I'm not particularly rich, but my employer offered health care plan is going to cover my kidney transplant operation at 100% (no deductible payment required, regardless of whether or not I've used it already.)

      I feel bad for Chinese people, because the condition that caused what I have (IgA Nephropathy) is by far more common there, and due to a cultural quirk (the belief that the body needs to be buried whole,) practically nobody actually donates organs. The only option there is to pay a donor under the table, which with or without coverage you're looking at easily six figures worth of expense.

      So at least in China, you really do indeed need to be rich, and you will pay out of pocket. And what's worse, is that your donor barely gets enough money to buy crappy Apple products.

    2. Re:Let me save you some trouble... by Gavagai80 · · Score: 5, Insightful

      Obamacare has not made insurance more affordable, not even for "low paid working stiffs".

      It certainly has. I had to drop my catastrophic-only insurance coverage around 2008 because it was just too expensive even for the limited coverage. Now with the medicaid expansion I've got full socialized medicine.

      --
      This space intentionally left blank
    3. Re:Let me save you some trouble... by orlanz · · Score: 4, Interesting

      Sorry it sucked for you. But I personally know two people that without Obamacare's exchanges, one would probably not be talking today, and the other would have moved to another country for the same medication and medical service but 1/5 the cost. Sorry, but prior to Obamacare, there were a lot of people like them who "just got by" because they weren't chronically sick to be taken in by emergency care, but were slowly wasting away because the healthcare market felt they were unprofitable.

      Obamacare is no where near perfect, but for gods sake, the US couldn't touch anything in Healthcare for over 3 decades! All those presidents and congressmen in that time were useless for the sick and needy of the US.

  4. Sources by Anonymous Coward · · Score: 2, Insightful

    I'd rather trust the Chinese hackers over Engadget, thanks.

  5. Those hackers are still at work by Trailer+Trash · · Score: 5, Funny

    Next, they're going to hack German restaurants to get some tasty recipes. I hear they're also hacking into Martin O'Malley's email to figure out how to run a great political campaign. And looking for dental information from the English. Etc.

    1. Re:Those hackers are still at work by viperidaenz · · Score: 4, Insightful

      No, they hacked an American health insurance company to figure out how healthcare in American got so broken. They probably don't want to make the same mistakes.

  6. I would like to see some evidence for once by Anonymous Coward · · Score: 2, Interesting

    Every time it is the Chinese, the Russians or even the North Koreans. I would like to see some evidence of this. I have no doubt they, and everyone else for that mater, are involved in these shenanigans, but I highly doubt that there is clear cut evidence, or even just circumstantial evidence.
    As far as I know every competent hacker uses zombies as proxies which leaves nothing to trace, if done properly.

    1. Re:I would like to see some evidence for once by Lead+Butthead · · Score: 2

      Every time it is the Chinese, the Russians or even the North Koreans...

      No evidence needed, but can be fabricated on demand.
      "USA is surrounded by enemies and under constant attack. Your government need more surveillance power to protect you."

      --
      ELOI, ELOI, LAMA SABACHTHANI!?
  7. Would it be that bad? by sigmabody · · Score: 2

    I mean, would a Chinese politician be any worse than a US politician, really? Any more corrupt? Any less likable? Moreover, the US a basically already implementing mechanisms of rights confiscation, ubiquitous domestic surveillance, state-controlled economy, a police state, etc. We're practically already China, in terms of how the government functionally operates. Would allowing Chinese politicians be all that bad?

    1. Re:Would it be that bad? by hackingbear · · Score: 2

      We're practically already China, in terms of how the government functionally operates.

      No, we package our shits much better. They have propaganda departments; we have marketing departments. They are starting to learn political marketing from us, however.

  8. bogus by igsmo · · Score: 2

    The China bashing in western media is just getting ridiculous.

  9. Unlikely by Anonymous Coward · · Score: 2, Insightful

    The United States - the most utterly dismal health care system in the industrialised world, is the last place on earth that anyone would look for a good example of how to implement health care. This looks like more US propaganda. Slashdot is rapidly becoming the mouth piece of a mad US regime, obsessed with China and Russia. The Chinese certainly have nothing to learn from the catastrophic failures of private sector profit from the sick and dying in America. Europe is the place to learn about how to implement health care correctly. The US system is truly awful, amoral, and utterly inhuman. If I lived there, I'd certainly leave. What an awful country.

  10. Very ambitious. by 140Mandak262Jamuna · · Score: 4, Insightful
    My colleagues are Masters and PhDs and they hack out C++ to solve Maxwell's equations for a living. These are people who got 790 verbal, 800 quant and 790 analysis in GRE. They solve London Times Cryptic cross word puzzles for fun. They made several valiant attempts and have given up whimpering incoherently about copay, coinsurance and out of pocket maxima. (See I even learnt from them plural of maximum is maxima ). Again, they/we did not try to understand the whole US Healthcare, just our employee health benefit plan, the flex spending account, and the deductible partly kicked in by our employer.

    The Chinese trying to understand our healthcare system? GOOD. LUCK. BTW if you do figure it out, please explain it to us, Much obliged.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  11. Holy fucking shit by easyTree · · Score: 2

    Dear USA

    Are you serious?

    Feel free to blame China for everything bad - even imaginary incidents or those you perpetrate yourself - we'll believe it.

    Noone is going to believe that China is stupid enough to even consider imitating your 'health'-care system.

    Is this an attempt to paint the US 'health'-care system as something worth imitating?

  12. Re:How embarrassing by CanadianMacFan · · Score: 2

    There's lots of money once you cut out the insurance companies, lawyers, and too high malpractice suit awards but money isn't the issue in the US. There's a fear of socialism there and for some reason providing healthcare to everyone is viewed as almost the ultimate step towards it. Never mind that policing, fire fighting, and education are all public services and that providing healthcare would be a great boost to productivity. If people can go to the doctor when problems are starting then they remain healthier and it costs the system less money overall.

  13. Re:Why hack? by jedidiah · · Score: 2

    Hospital billing rates and contract insurance reimbursement rates are no great secret. Government reimbursement rates are certainly no secret (medicare/medicaid).

    --
    A Pirate and a Puritan look the same on a balance sheet.
  14. How not to do it! by labnet · · Score: 3, Insightful

    I think they would be trying to find out NOT how to do it.
    The USA has the worst public healthcare system in the developed world on a cost benefit ratio.

      Americans seem to have this; well if you get sick its your fault attitude; and that general free public healthcare, as offered by almost every other industrialised nation, is akin to a communist assault.

    --
    46137
  15. Re:How embarrassing by Waffle+Iron · · Score: 2

    We would have to seriously jack up the tax rate in order to pay for something like that.

    We shouldn't have to. We already spend twice as much per capita on health care than any other country, with worse outcomes. Half of our health care system is already socialized (Medicare/Medicaid). That means if we could just get costs and quality in line with the rest of the world, we could cover everyone, get better results, and eliminate all private insurance premiums using no more tax money than we're already spending.

  16. Re:How embarrassing by Waffle+Iron · · Score: 4, Insightful

    No we don't. That's just media propaganda.

    It's the damned truth. Look it up. It looks like you've been fed on a diet of too much talk radio propaganda yourself.

    We eliminate the cost of insurance premiums by getting rid of the ridiculous cost structure of health care in this country. There are dozens of countries who already do this just fine, and the people there live longer and healthier lives. This isn't rocket science.

  17. Re:How embarrassing by spauldo · · Score: 3, Insightful

    That's funny, I know a lot of Americans that have gotten shitty and incompetent health care, misdiagnoses, and poor coverage. As long as we're throwing around anecdotes, I know one guy that was forced to turn down a good job offer because their insurance wouldn't cover his cancer meds. I also know a woman who only stays with her abusive cheating husband because she can't afford insurance for her Crohn's disease.

    I never understand arguments like yours. Our health care system sucks. It's just as prone to poor care as any other system. It reduces freedom of the individual (unless you count corporate "individuals," where it adds one more control over their employees). It's expensive, it doesn't cover everyone, and we all end up picking up the tab for the uninsured anyway. It ties health care to employment, which is ridiculous - people making close to minimum wage can't afford it without subsidies, and if you lose your job, you lose your insurance. And the insurance companies will do everything they can to discourage you from going to the doctor in the first place; that's what the deductible is for, as well as the common practice of having all the "in network" doctors based in another city.

    No system is perfect, but ours is just downright bad. You want to say the Canadian system sucks, go ahead - but don't pretend that ours is great.

    --
    Those who can't do, teach. Those who can't teach either, do tech support.