Counting the Dead in the Digital Siege Detection Mapping Patient Harm

The talk opens with evidence that ransomware attacks on hospitals raise in-hospital deaths. A Medicare-claims study cited by the speakers estimates a relative increase of 34 to 38 percent for patients already admitted when an attack begins, with the strongest effects among people with several comorbidities. Because that count covers only Medicare patients, the speakers treat the reported death toll as a floor. Regional spillover shows up as ambulance diversion, longer waits and patients leaving without being seen.

The central argument is that no current system records this harm. Breach reporting tracks data loss rather than patients. The classification systems offer device-security descriptors but no external-cause code for a cyber attack, death certificates have no field for one, and the disaster-risk hazard profiles name cyber threats without mentioning patient harm or death. The speakers propose an external-cause category, a certifier prompt and clinician documentation, all submittable through existing public revision processes instead of new treaties. A German investigation into a patient death after diversion, and a settled Alabama lawsuit, show how hard causation is to establish.

The legal segment frames the gap as a state duty. Under the right to life, states must exercise due diligence to prevent avoidable deaths and to document risks and losses, which the speakers argue places cyber attacks alongside natural disasters. They describe attribution as a chain in which technical detection comes first and the legal step is the weakest link. The closing remarks point to insurance, foreseeability in court and board oversight as levers that better data could move.