Pandemic in Plaintext

RF engineer Troy Brown (wave_guide) shares findings from an investigation into hospital wireless communications during the early months of the COVID-19 pandemic [00:01]. Seeking independent ground-truth data on ICU bed shortages and patient hospitalization rates, Brown turned to unencrypted radio paging protocols (POCSAG and FLEX) operating in the 929–931 MHz frequency band, which are ubiquitous across North American healthcare networks [02:24].

Brown challenges the common institutional claim that intercepting and decoding hospital pager transmissions constitutes a "sophisticated cyberattack" [04:50]. Using an inexpensive RTL-SDR dongle and open-source decoding tools like multimon-ng, he intercepted over 52 days of radio traffic, recording 17,286 decoded messages [15:35]. The captured transmissions contained egregious HIPAA violations broadcast in clear plaintext over the airwaves: 1,852 bed coordination requests containing patient full names, ages, room assignments, and physician details, along with 2,077 diagnostic messages including 1,219 explicit COVID-19 diagnoses, mechanical ventilation orders, and mortality notifications [15:41].

The talk contrasts hospital investments in internal network firewalls and enterprise HIPAA compliance software with the total absence of encryption on RF paging systems [10:11]. Brown demonstrates that commercial paging telemetry systems aggregate this unencrypted RF data into real-time hospital administrative dashboards [18:16]. He concludes with an urgent call for healthcare administrators, privacy regulators, and legal authorities to decommission unencrypted pagers in favor of secure, end-to-end encrypted mobile messaging solutions [19:45].

(AI summary — Gemini Flash)