Connect with us

Published

on

Elizabeth Amirault had never heard of a Narx Score. But she said she learned last year the tool had been used to track her medication use.

This story also ran on Marketplace. It can be republished for free.

During an August 2022 visit to a hospital in Fort Wayne, Indiana, Amirault told a nurse practitioner she was in severe pain, she said. She received a puzzling response.

Your Narx Score is so high, I cant give you any narcotics, she recalled the man saying, as she waited for an MRI before a hip replacement.

Tools like Narx Scores are used to help medical providers review controlled substance prescriptions. They influence, and can limit, the prescribing of painkillers, similar to a credit score influencing the terms of a loan. Narx Scores and an algorithm-generated overdose risk rating are produced by health care technology company Bamboo Health (formerly Appriss Health) in its NarxCare platform.

Such systems are designed to fight the nations opioid epidemic, which has led to an alarming number of overdose deaths. The platforms draw on data about prescriptions for controlled substances that states collect to identify patterns of potential problems involving patients and physicians. State and federal health agencies, law enforcement officials, and health care providers have enlisted these tools, but the mechanics behind the formulas used are generally not shared with the public.

Artificial intelligence is working its way into more parts of American life. As AI spreads within the health care landscape, it brings familiar concerns of bias and accuracy and whether government regulation can keep up with rapidly advancing technology.

The use of systems to analyze opioid-prescribing data has sparked questions over whether they have undergone enough independent testing outside of the companies that developed them, making it hard to know how they work.

Lacking the ability to see inside these systems leaves only clues to their potential impact. Some patients say they have been cut off from needed care. Some doctors say their ability to practice medicine has been unfairly threatened. Researchers warn that such technology despite its benefits can have unforeseen consequences if it improperly flags patients or doctors.

We need to see what’s going on to make sure we’re not doing more harm than good, said Jason Gibbons, a health economist at the Colorado School of Public Health at the University of Colorados Anschutz Medical Campus. We’re concerned that it’s not working as intended, and it’s harming patients.

Amirault, 34, said she has dealt for years with chronic pain from health conditions such as sciatica, degenerative disc disease, and avascular necrosis, which results from restricted blood supply to the bones. Email Sign-Up

Subscribe to KFF Health News' free Weekly Edition. Your Email Address Sign Up

The opioid Percocet offers her some relief. Shed been denied the medication before, but never had been told anything about a Narx Score, she said.

In a chronic pain support group on Facebook, she found others posting about NarxCare, which scores patients based on their supposed risk of prescription drug misuse. Shes convinced her ratings negatively influenced her care.

Apparently being sick and having a bunch of surgeries and different doctors, all of that goes against me, Amirault said.

Database-driven tracking has been linked to a decline in opioid prescriptions, but evidence is mixed on its impact on curbing the epidemic. Overdose deaths continue to plague the country, and patients like Amirault have said the monitoring systems leave them feeling stigmatized as well as cut off from pain relief.

The Centers for Disease Control and Prevention estimated that in 2021 about 52 million American adults suffered from chronic pain, and about 17 million people lived with pain so severe it limited their daily activities. To manage the pain, many use prescription opioids, which are tracked in nearly every state through electronic databases known as prescription drug monitoring programs (PDMPs).

The last state to adopt a program, Missouri, is still getting it up and running.

More than 40 states and territories use the technology from Bamboo Health to run PDMPs. That data can be fed into NarxCare, a separate suite of tools to help medical professionals make decisions. Hundreds of health care facilities and five of the top six major pharmacy retailers also use NarxCare, the company said.

The platform generates three Narx Scores based on a patients prescription activity involving narcotics, sedatives, and stimulants. A peer-reviewed study showed the Narx Score metric could serve as a useful initial universal prescription opioid-risk screener.

NarxCares algorithm-generated Overdose Risk Score draws on a patients medication information from PDMPs such as the number of doctors writing prescriptions, the number of pharmacies used, and drug dosage to help medical providers assess a patients risk of opioid overdose.

Bamboo Health did not share the specific formula behind the algorithm or address questions about the accuracy of its Overdose Risk Score but said it continues to review and validate the algorithm behind it, based on current overdose trends.

Guidance from the CDC advised clinicians to consult PDMP data before prescribing pain medications. But the agency warned that special attention should be paid to ensure that PDMP information is not used in a way that is harmful to patients.

This prescription-drug data has led patients to be dismissed from clinician practices, the CDC said, which could leave patients at risk of being untreated or undertreated for pain. The agency further warned that risk scores may be generated by proprietary algorithms that are not publicly available and could lead to biased results.

Bamboo Health said that NarxCare can show providers all of a patients scores on one screen, but that these tools should never replace decisions made by physicians.

Some patients say the tools have had an outsize impact on their treatment.

Bev Schechtman, 47, who lives in North Carolina, said she has occasionally used opioids to manage pain flare-ups from Crohns disease. As vice president of the Doctor Patient Forum, a chronic pain patient advocacy group, she said she has heard from others reporting medication access problems, many of which she worries are caused by red flags from databases.

Theres a lot of patients cut off without medication, according to Schechtman, who said some have turned to illicit sources when they cant get their prescriptions. Some patients say to us, Its either suicide or the streets. Elizabeth Amirault of Indiana has dealt with chronic pain for years. She believes a tool that tracks her prescription drug use negatively influenced her ability to get the medication she needs. (Nicholas Amirault)

The stakes are high for pain patients. Research shows rapid dose changes can increase the risk of withdrawal, depression, anxiety, and even suicide.

Some doctors who treat chronic pain patients say they, too, have been flagged by data systems and then lost their license to practice and were prosecuted.

Lesly Pompy, a pain medicine and addiction specialist in Monroe, Michigan, believes such systems were involved in a legal case against him.

His medical office was raided by a mix of local and federal law enforcement agencies in 2016 because of his patterns in prescribing pain medicine. A year after the raid, Pompys medical license was suspended. In 2018, he was indicted on charges of illegally distributing opioid pain medication and health care fraud.

I knew I was taking care of patients in good faith, he said. A federal jury in January acquitted him of all charges. He said hes working to have his license restored.

One firm, Qlarant, a Maryland-based technology company, said it has developed algorithms to identify questionable behavior patterns and interactions for controlled substances, and for opioids in particular, involving medical providers.

Thecompany, in an online brochure, said its extensive government work includes partnerships with state and federal enforcement entities such as the Department of Health and Human Services Office of Inspector General, the FBI, and the Drug Enforcement Administration.

In a promotional video, the company said its algorithms can analyze a wide variety of data sources, including court records, insurance claims, drug monitoring data, property records, and incarceration data to flag providers.

William Mapp, the companys chief technology officer, stressed the final decision about what to do with that information is left up to people not the algorithms.

Mapp said that Qlarants algorithms are considered proprietary and our intellectual property and that they have not been independently peer-reviewed.

We do know that there’s going to be some percentage of error, and we try to let our customers know, Mapp said. It sucks when we get it wrong. But we’re constantly trying to get to that point where there are fewer things that are wrong.

Prosecutions against doctors through the use of prescribing data have attracted the attention of the American Medical Association.

These unknown and unreviewed algorithms have resulted in physicians having their prescribing privileges immediately suspended without due process or review by a state licensing board often harming patients in pain because of delays and denials of care, said Bobby Mukkamala, chair of the AMAs Substance Use and Pain Care Task Force.

Even critics of drug-tracking systems and algorithms say there is a place for data and artificial intelligence systems in reducing the harms of the opioid crisis.

It’s just a matter of making sure that the technology is working as intended, said health economist Gibbons. Andy Miller: amiller@kff.org, @gahealthnews

Sam Whitehead: swhitehead@kff.org, @sclaudwhitehead Related Topics Pharmaceuticals Health IT Indiana Michigan North Carolina Opioids Contact Us Submit a Story Tip

Continue Reading

Sports

Larson miscue ends in crash at Indy 500 practice

Published

on

By

Larson miscue ends in crash at Indy 500 practice

INDIANAPOLIS — Kyle Larson experienced his first crash at Indianapolis Motor Speedway on Thursday, the second day that Indianapolis 500 drivers participated in open testing on the 2.5-mile oval.

The 2021 NASCAR champion spun coming out of the first turn, hit the wall and bounced down to the warmup lane before tapping the wall a second time and eventually rolling to a stop.

Larson blamed himself, saying he forgot to hit the weight jacker going into the turn. But he also tried to find some positive from the incident.

“I’m happy to crash my first Indy car and live through it,” Larson said.

An Arrow McLaren official told The Indianapolis Star that Larson will not take part in the Thursday afternoon practice session due to the crash damage. The team decided not to rush the repairs, which would have left minimal practice time at best, the official said.

Larson is attempting to complete “the double” by racing in both the Indianapolis 500 and NASCAR’s Coca-Cola 600 on May 25. His first attempt was thwarted by a rain delay in the 2024 Indy 500 that saw him arrive to the NASCAR race just as that race was called off for weather.

He wasn’t the only familiar name to crash Thursday. Two-time Indianapolis 500 winner Takuma Sato crashed shortly after Larson, losing the back end of his car in the first turn and smacking the wall hard in the short chute before rolling to a stop.

“Lost it,” Sato said. “I simply lost it.”

Both drivers were checked at the infield hospital and released.

Graham Rahal also tapped the wall late in Wednesday’s practice.

Series officials added horsepower to the cars for the Thursday morning session as they test the IndyCar hybrid, which makes its IMS debut next month. An afternoon session without the boost closes out the two-day test.

The Associated Press contributed to this report.

Continue Reading

Sports

Spire releases crew chief Childers after 9 races

Published

on

By

Spire releases crew chief Childers after 9 races

CHARLOTTE, N.C. — Spire Motorsports has parted ways with championship-winning crew chief Rodney Childers after only nine races with the team.

Childers, one of the winningest active crew chiefs in the Cup Series, won the 2014 championship with Kevin Harvick at Stewart-Haas Racing. When that team closed at the end of last season, Childers moved to Spire to crew chief Justin Haley.

Through the first nine races, Haley is 23rd in the Cup standings. His best finish this year is 10th at Homestead, but Haley is coming off a 13th-place finish at Bristol, where he scored a season-high 13 stage points.

The decision to release Childers came after NASCAR’s only off weekend of the season. The team announced Thursday that Ryan Sparks, competition director and former crew chief, will be Haley’s crew chief for the rest of this season.

“NASCAR is an ever-evolving sport and the path to improvement isn’t always comfortable,” Spire Motorsports co-owner Jeff Dickerson said in a statement. “The break in the Cup Series schedule gave us a chance to evaluate where we are as a program. We took the opportunity to discuss the best paths forward for everyone involved and the team and Rodney agreed that it would be best for us to part ways.

“Rodney has worked at the highest level of our sport for 20 years, and he knows what it takes to win championships. With that in mind, we collectively acknowledged challenges with the team dynamic. Having the right combination of talent is just as important as the results on track. As we move in a new direction it is not lost on us that Rodney has been an invaluable asset to our organization, as he will continue to be for others in this sport.”

Childers addressed his departure on social media, writing: “I know this is a shock. But also know that not everything works out perfect all the time. That’s how life works. This was just one of those things that just wasn’t working for either of us. I appreciate my time at Spire, working with JH and the entire 7 team. We did a lot of good that is yet to be seen, and I wish them the best in the future.”

He said he would take some time off, focus on his family and “honestly just see what the racing world holds for me next.”

Childers is tied for second in wins among active crew chiefs. Childers and Adam Stevens each have 40 Cup wins. Paul Wolfe ranks first with 42 series victories.

Continue Reading

Politics

The hidden risk of updatable firmware

Published

on

By

The hidden risk of updatable firmware

The hidden risk of updatable firmware

Opinion by: Igor Zemtsov, chief technology officer at TBCC

Crypto security is a ticking time bomb. Updatable firmware might just be the match that lights the fuse.

Hardware wallets have become the holy grail of self-custody, the ultimate safeguard against hackers, scammers and even government overreach. There’s an inconvenient truth, however, that most people ignore: Firmware updates aren’t just security patches.Ā 

They’re potential backdoors, waiting for someone — whether a hacker, a rogue developer or a shady third party — to kick them wide open.

Every time a hardware wallet manufacturer pushes an update, users are forced to make a choice. Hit that update button and hope for the best, or refuse to update and risk using outdated software with unknown vulnerabilities. Either way, it’s a gamble.Ā 

In crypto, a bad gamble can mean waking up to an empty wallet.

Firmware updates aren’t always your friend

Updating firmware sounds like common sense. More security! Fewer bugs! Better user experience!

Here’s the thing: Every update is also an opportunity not just for the wallet provider but for anyone with the power, or motivation, to tamper with the process.

Hackers dream of firmware vulnerabilities. A rushed or poorly audited update can introduce tiny, almost imperceptible flaws — ones that sit in the background, waiting for the right moment to drain funds. And the best part? Users will never know what hit them.

Then there’s the more unsettling possibility: deliberate backdoors.

Recent: Hardware wallet Ledger helps competitor Trezor resolve security vulnerability

Tech companies have been forced to include government-mandated surveillance tools before. What makes anyone think hardware wallet makers are exempt? If a regulatory agency — or worse, a criminal organization — wants access to private keys, firmware updates are the perfect attack vector. One hidden function. One disguised line of code.Ā 

That’s all it takes. Still think firmware updates are harmless?Ā 

Firmware vulnerabilities are already being exploited

This isn’t some far-fetched, doomsday scenario. It has already happened.

Ledger, one of the biggest names in crypto security, had a major security crisis in 2018 when security researcher Saleem Rashid exposed a vulnerability that allowed attackers to replace Ledger Nano S firmware and hijack private keys. Nearly 1 million devices were at risk before a fix was rolled out. The scary part? There was no way for users to know if their devices had already been compromised.

In 2023, OneKey suffered a similar nightmare. White hat hackers demonstrated that its firmware could be cracked in mere seconds. No crypto was lost — this time. But what if real attackers had found the flaw first?

Then came the ā€œDark Skippyā€ exploit, taking firmware-based attacks to an entirely new level. With just two signed transactions, hackers could extract a user’s entire seed phrase — without setting off a single alarm. If firmware updates can be manipulated this easily, how can anyone be sure their assets are safe?

The hidden price of updatable firmware

To be fair, not all firmware updates are security disasters. Ledger uses a proprietary operating system and secure element chips for added protection now. Trezor takes an open-source approach, allowing the community to scrutinize its firmware. Coldcard and BitBox02 give users manual control over updates, reducing — but not eliminating — risk.

Here’s the real question: Can users ever be 100% sure that an update won’t introduce a fatal flaw?

Some wallets have decided to eliminate the risk altogether. Tangem ships with fixed, non-updatable firmware, meaning that its code can never be altered once the device leaves the factory. No updates. No patches.Ā 

Of course, this approach has its trade-offs. If a vulnerability is discovered, there’s no way to fix it. But in security, predictability matters.Ā 

Real crypto security means taking back control

The crypto market was worth $2.79 trillion as of March 2025. With that much money on the table, cybercriminals, rogue insiders and overreaching governments are always looking for weak points. Hardware wallet makers should be laser-focused on security.

Choosing a hardware wallet shouldn’t feel like gambling with private keys. It shouldn’t involve blind trust in a corporation’s ability to push updates responsibly. Users deserve more than vague reassurances. They deserve security models that put control where it belongs — with them.

Security isn’t about convenience. It’s about control. Any system that requires trusting unknown developers, opaque update processes or firmware that can be changed at will? That’s not control. That’s a liability.

The only real way to keep a hardware wallet safe? Remove the guesswork. Strip away the blind trust. Always research the developers’ backgrounds, check their track record for security incidents, and see how they’ve handled past vulnerabilities. Stick to verifiable facts — security should never be based on assumptions.

Opinion by: Igor Zemtsov, chief technology officer at TBCC.

This article is for general information purposes and is not intended to be and should not be taken as legal or investment advice. The views, thoughts, and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph.

Continue Reading

Trending