The eponymous sign outside Epic headquarters in Verona, Wisconsin.
Source: Yiem via Wikipedia CC
Epic Systems, the largest provider of software for managing medical records, says a venture-backed startup called Particle Health is using patient data in unauthorized and unethical ways that have nothing to do with treatment.
Epic told customers in a notice on Thursday that it cut off its connection to Particle, hindering the company’s ability to tap a system with more than 300 million patient records. Particle is one of several companies that acts as a sort of middleman between Epic and the organizations — typically hospitals and clinics — that need the data.
Patient data is inherently sensitive and valuable, and it’s protected by the Health Insurance Portability and Accountability Act, or HIPAA, a federal law that requires a patient’s consent or knowledge for third-party access. One way Epic’s electronic health records (EHR) are accessed is through an interoperability network called Carequality, which facilitates the exchange of more than 400,000 documents a month, according to its website. Particle is a member of the Carequality network.
To join the network, organizations are vetted and have to agree to abide by clear “Permitted Purposes” for the exchange of patient data. Epic responds to requests for data that fall under the “Treatment” permitted purpose, which means the recipient is providing care to the person whose records they are requesting.
Epic said in its notice on Thursday that it filed a formal dispute with Carequality on March 21, over concerns that Particle and its participant organizations “might be inaccurately representing the purpose associated with their record retrievals.” The company suspended its connection with Particle that day.
“This poses potential security and privacy risks, including the potential for HIPAA Privacy Rule violations,” Epic said in the notice, which was obtained by CNBC.
In a blog post late Friday, Carequality said it takes disputes “very seriously and is committed to maintaining the integrity of the dispute resolution process as well as trusted exchange within the framework.” The organization said it can’t comment about the existence of any disputes or member activities.
Representatives from Epic and Particle didn’t respond to requests for comment. However, Particle published a blog post Friday evening and said it began “addressing this issue immediately” after Epic “stopped responding to data requests from a subset of customers” on March 21. Particle said in the post that a big challenge in such matters is that there is “no standard reference to assess the definition of Treatment.”
“These definitions have become more difficult to delineate as care becomes more complicated with providers, payers, and payviders all merging in various large healthcare conglomerates,” Particle wrote.
Epic, a 45-year-old privately held company based in Wisconsin, isthe largest EHR vendor by hospital market share in the U.S., with 36% of the market, according to a May report from KLAS Research. Oracle is second at 25%, following the software company’s $28 billion purchase of Cerner in 2022.
As of July 2022, Particle had raised a total of $39.3 million from investors including Menlo Ventures, Story Ventures and Pruven Capital, according to a release. The New York-based startup said at the time that its technology “uniquely combines data from 270 million plus patients’ medical records by aggregating and unifying healthcare records from thousands of sources.”
Epic said Particle introduced thousands of new participant connections to Carequality in October, and asserted that they fell under the treatment use case. In the following months, all of Particle’s participant organizations claimed a permitted purpose of treatment for their requests, Epic said.
‘Non-treatment use case’
However, Epic began to notice some red flags. The company said it observed anomalies in the patient record exchange patterns, like requests for large numbers of records within a certain geographical region. Additionally, Epic said that the companies connected to Particle weren’t sending new data back from patients, which “suggests a non-treatment use case.”
Epic and its Care Everywhere Governing Council, consisting of 15 industry representatives, evaluated Particle’s new participant connections and determined that organizations like Integritort, MDPortals and Reveleer, which acquired MDPortals last year, “likely didn’t conform to a Treatment Permitted Purpose,” the notice said.
Epic said it learned that another Carequality member was planning to file a dispute, alleging that Integritort was using the patient data to try and identify potential class action lawsuit participants. On March 28, Epic said it discovered that a participant called Novellia claimed it was requesting records under treatment, despite publicly advertising its product as a “personal health tool.”
Integritort, Reveleer and Novellia didn’t respond to requests for comment.
Epic said it filed a formal dispute with Carequality at the Governing Council’s recommendation. On April 4, Epic asked Particle to provide additional information to illustrate how its participants qualify for the treatment use case, according to the notice.
Michael Marchant, director of interoperability and innovation at University of California Davis Health, serves as the chair of Epic’s Governing Council. He said it’s hard to know exactly why Particle might have provided these organizations with records, or whether it intentionally engaged in wrongdoing. But, he said, companies have to act responsibly even if pressured to deliver financial results.
“If they were selling to things that they knew were not treatment-related organizations in an effort to match VC funding or profit margins or revenue targets or what have you, then that would be really bad,” Marchant told CNBC in an interview.
In a statement on LinkedIn Wednesday, Particle founder Troy Bannister said Epic acted unilaterally, and that Particle has not seen “rationale, justification or official claims” surrounding these issues.
Bannister wrote that, to the company’s knowledge, “all of the affected partners directly support treatment.” He said these organizations pull data for care providers and share data back with the Carequality network.
“While we continue maintaining our connection with Carequality, the ability for one implementor to decide, without evidence or even so much as a warning, to disconnect providers at massive scale, jeopardizes clinical operations for hundreds of thousands of patients as well as the trust that is so critical to a trust-based exchange,” Bannister wrote.
Bannister didn’t address Epic’s April 4 request for additional information.
The formal dispute process is still ongoing. Marchant, who also serves as the co-chair of an advisory council at Carequality, said it’s the first time in the network’s history that a complaint has gotten this far.
Mark Zuckerberg, chief executive officer of Meta Platforms Inc., during the Meta Connect event on Wednesday, Sept. 25, 2024.
Bloomberg | Bloomberg | Getty Images
Meta shares hit a record high on Monday, underscoring investor interest in the company’s new AI superintelligence group.
The company’s shares reached $747.90 during midday trading, topping Meta’s previous stock market record in February when it began laying off the 5% of its workforce that it deemed “low performers.”
Meta joins Microsoft and Nvidia among tech megacaps that have reached new highs of late, all closing at records Monday. Apple, Amazon, Alphabet and Tesla remain below their all-time highs reached late last year or early this year.
Meta CEO Mark Zuckerberg has been on an AI hiring blitz amid fierce competition with rivals such as OpenAI and Google parent Alphabet. Earlier in June, Meta said it would hire Scale AI CEO Alexandr Wang and some of his colleagues as part of a $14.3 billion investment into the executive’s data labeling and annotation startup.
The social media company also hired Nat Friedman and his business partner, Daniel Gross, the chief of Safe Superintelligence, an AI startup with a valuation of $32 billion, CNBC reported on June 19. Meta’s attempts to buy Safe Superintelligence were rebuffed by the startup’s founder and AI expert Ilya Sutskever, the report noted.
Wang and Friedman are the leaders of Meta’s new Superintelligence Labs, tasked with overseeing the company’s artificial intelligence foundation models, projects and research, a person familiar with the matter told CNBC. The term superintelligence refers to technology that exceeds human capability.
Bloomberg News first reported about the new superintelligence unit.
Meta has also snatched AI researchers from OpenAI. Sam Altman, OpenAI’s CEO, said during a podcast that Meta was offering signing bonuses as high as $100 million.
Andrew Bosworth, Meta’s technology chief, spoke about the social media company’s AI hiring spree during a June 20 interview with CNBC’s “Closing Bell Overtime,” saying that the talent market is “really incredible and kind of unprecedented in my 20-year career as a technology executive.”
An electric air taxi by Joby Aviation flies near the Downtown Manhattan Heliport in Manhattan, New York City, U.S., November 12, 2023.
Roselle Chen | Reuters
Joby Aviation stock soared about 12% as the flying air taxi maker got closer to launching a service in the United Arab Emirates.
The electric vertical takeoff and landing, or eVTOL, company said Monday that it delivered its first aircraft to the UAE and has completed piloted flight tests as it readies for a 2026 launch in the region.
“Our flights and operational footprint in Dubai are a monumental step toward weaving air taxi services into the fabric of daily life worldwide,” said founder and CEO JoeBen Bevirt in a release. He called the Middle East nation a “launchpad for a global revolution in how we move.”
Joby’s planned launch in the UAE was announced in February 2024 as part of an agreement with Dubai’s Road and Transport Authority. The deal included exclusive rights to conduct air taxi service in Dubai for six years.
Read more CNBC tech news
As part of the project, Joby said in November that it began building one vertiport at Dubai International Airport, with three additional locations slated for Palm Jumeirah and Dubai’s downtown and marina. Joby also announced an air taxi agreement with three Abu Dhabi government departments in 2024.
The California-based company has made other expansion moves in the Middle East. Shares jumped earlier this month after Saudi Arabian firm Abdul Latif Jameel announced a roughly $1 billion investment for up to 300 eVTOLs. The firm participated in Joby’s Series C funding round.
Joby shares have surged more than 32% this year, swelling its market capitalization to over $9 billion.
Demand for air taxis, which take off and land similar to helicopters, has gained momentum in recent years. The service faces regulatory and safety hurdles but has been lauded for its ability to cut traffic congestion and slash emissions.
Earlier this month, President Donald Trump signed an executive order that included a pilot program for testing electric air taxis.
Oracle CEO Safra Catz speaks at the FII PRIORITY Summit in Miami Beach, Florida, on Feb. 20, 2025.
Joe Raedle | Getty Images
Oracle shares jumped more than 5% after a recent filing showed a cloud deal that would add over $30 billion annually.
CEO Safra Catz is slated to share the deal news at a company meeting Monday, according to a filing with the Securities and Exchange Commission. The revenues are expected to start hitting in the 2028 fiscal year.
“Oracle is off to a strong start in FY26,” Catz is expected to say, according to the filing. “Our MultiCloud database revenue continues to grow at over 100%, and we signed multiple large cloud services agreements including one that is expected to contribute more than $30 billion in annual revenue starting in FY28.”
The deals revealed Monday by Catz will not affect the company’s 2026 guidance, according to the filing.