Health201 portal

From Health 201FailSystems

how automated healthcare fails, how you'd know, and what to do at each tier — every claim sourced, reviewed continuously

Layer 5 of 5

The human handoff

The moment automation hands work back to a person who has stopped watching, stopped practising, or stopped hearing the alarms.

Reviewed 27 September 2026Fact-checked 11 November 2026 Involved in 33 of 55 incidents115 sources (102 primary or secondary)

Under review. A scheduled fact-check could not confirm part of this entry against its sources. It is being reviewed and will be corrected or confirmed. How fact-checks work.

What this layer is

The human handoff layer is everything that has to be true of people for an automated hospital to fail safely: that clinicians notice when a machine is wrong, that someone owns each alarm and alert, that staff can take over when automation stops, and that they can still run the ward on paper. It covers automation bias (following or waiting for the machine), out-of-the-loop performance (taking over without situation awareness), skill atrophy and deskilling, alarm and alert fatigue, and downtime competence.

The problem is old. Bainbridge's 1983 'Ironies of Automation' observed that automating a process leaves the operator with the tasks the designer could not automate, including taking over in abnormal conditions, while the manual skills needed for that takeover deteriorate when they are not used. Parasuraman and Riley (1997) described misuse (over-reliance) and disuse (ignoring automation, commonly after false alarms). Endsley and Kiris (1995) showed that operators of an automated system were slower to decide after it failed, and linked this to lower situation awareness from passive monitoring.

Healthcare now has direct evidence of each mechanism. Experienced radiologists' accuracy collapsed when a purported AI suggested the wrong BI-RADS category (Dratsch 2023). Endoscopists' adenoma detection rate in non-AI colonoscopies fell from 28.4% to 22.4% after AI was introduced (Budzyń 2025). The Joint Commission logged 98 alarm-related sentinel events, 80 of them deaths, between January 2009 and June 2012. During EHR downtime, safety reports show downtime procedures missing or not followed in 46% of cases (Larsen 2018), and clinicians at Ascension in 2024 described medication errors and delayed labs after the switch to paper.

FailSystems viewIn an automated hospital the human is no longer the primary operator but the fallback, and a fallback that is never exercised decays. Every other layer on this site eventually fails into this one: when power, network, devices or models go, the plan is 'staff take over', and that plan silently assumes skills, attention and alarm ownership that automation has been eroding. The dangerous moment is not the outage itself but the handback, when a person with stale skills and little context is asked to act fast. We judge that rehearsal (unaided practice at tier 0, drills at tiers 2 and 3) is the only defense that addresses the cause rather than the symptom, and that it is the one hospitals most often cut.

How it fails

Automation bias: following the machine, or waiting for it

Clinicians over-rely on decision support, making errors of commission (following incorrect advice) or omission (not acting because the system did not prompt). Reliance increases with workload, time pressure and task complexity, and when verifying the output is hard. Experience reduces but does not remove it: in a mammography experiment, very experienced readers' accuracy dropped from 82.3% to 45.5% when the AI suggestion was wrong.[1,2,3,4,5,6]

Warning signs

  • Clinician-AI agreement near 100% with no documented overrides
  • Decisions made faster after AI deployment with no change in case mix
  • Staff cannot explain the basis of a recommendation they acted on
  • AI output placed where it is seen before the clinician's own assessment

Seen inWrong AI suggestions pull radiologists' mammogram ratings off

Out-of-the-loop handback

When automation disconnects or fails, the person taking over has been monitoring passively and lacks current situation awareness. Endsley and Kiris found slower decisions after an expert system failed, attributed mainly to the shift from active to passive processing. Bainbridge noted that manual operators need 15 to 30 minutes to build a feel for a process before taking over, time an automated handback rarely allows.[7,8,9,10]

Warning signs

  • Automation disconnects or mode changes without a clear, explained display
  • Takeover procedures exist on paper but are never practised against realistic failure signatures
  • Supervisors monitor many automated streams at once with low event rates

Seen inAir France 447: autopilot hands a stalled aircraft back to a crew (non-clinical analogue), Uber automated test vehicle kills pedestrian while safety operator is distracted (non-clinical analogue)

Skill atrophy and deskilling

Skills that automation performs routinely are practised less and deteriorate, so a formerly experienced operator becomes an inexperienced one at the moment of takeover. In four Polish endoscopy centres, the adenoma detection rate of standard (non-AI) colonoscopy fell 6.0 percentage points in the three months after AI was introduced. Trainees who learn with automation from the start may never build the unaided skill at all (judgement; not yet measured).[11,8]

Warning signs

  • Unaided performance is not measured after AI rollout
  • No protected unaided cases or simulator time
  • New staff onboarded only on the automated workflow

Seen inEndoscopists detect fewer adenomas without AI after AI is introduced

Alarm fatigue and alarm disuse

Most device alarm signals do not require clinical intervention (the Joint Commission cites estimates of 85 to 99 percent), so clinicians become desensitised and turn alarms down, off, or outside safe limits. Parasuraman and Riley described this as disuse: false alarms teach operators to ignore automation. Alarm fatigue was the most common contributing factor in alarm-related sentinel events reported to the Joint Commission.[12,13,14,5]

Warning signs

  • Hundreds of alarm signals per patient per day on a unit
  • Default alarm limits never tailored to the patient
  • Alarms found silenced or with widened limits on rounds
  • ECG electrodes and sensors not changed on schedule

Seen inICU patient dies after alarms go unanswered for an hour, Patient dies while a heart monitor's crisis alarm is switched off

Unowned alarms and unrouted alerts

An alarm only protects a patient if a specific person hears it and is responsible for acting. Joint Commission data list alarms not audible in all areas (25 events), alarms inappropriately turned off (36) and inadequate staffing to respond among contributors. The Joint Commission's alarm-safety goal (NPG.01.05.01 from January 2026, previously NPSG.06.01.01) requires hospitals to define who may set, change and turn off alarm parameters, but it generally excludes CPOE and other IT alerts, so AI and EHR alerts can fall outside any alarm-ownership policy.[12,15,16,17,18]

Warning signs

  • No written answer to 'who responds to this alert, and within how long?'
  • AI or EHR alerts routed to a shared inbox or a role, not a person
  • Central-station monitoring without a named watcher on every shift

Seen inICU patient dies after alarms go unanswered for an hour, Epic Sepsis Model missed two-thirds of sepsis cases in external validation, Patient dies while a heart monitor's crisis alarm is switched off

Software alert fatigue and reflexive override

Decision-support alerts with low specificity are overridden routinely: a review found drug safety alerts overridden in 49% to 96% of cases. A widely deployed sepsis model generated alerts for 18% of all hospitalised patients while missing 67% of sepsis cases at one academic centre, a burden the authors described as alert fatigue. Clinicians learn to click through, including on the rare correct alert.[19,20]

Warning signs

  • Override rates above 90% for an alert class
  • Alert volume rises with each new model or rule, none retired
  • No one reviews overridden alerts that preceded harm

Seen inEpic Sepsis Model missed two-thirds of sepsis cases in external validation

Lost downtime competence

When the EHR or other systems go down, staff must run care on paper, but ONC notes that many organisations have employees who do not know how to work in a paper-based environment. Safety reports tied to downtime cluster in lab orders and results and medication, and patient identification and communication fail. Paper workflows are slower (lab results averaged 62% longer in one study) and the supporting infrastructure, such as forms and fax machines, may no longer exist.[21,22,23,24,25]

Warning signs

  • No downtime drill in the past 12 months
  • Paper forms missing, outdated, or stored where no one can find them
  • Read-only backup EHR credentials unknown to front-line staff
  • Downtime events not followed by review

Seen inAscension ransomware and multi-week EHR downtime

Incidents

13 October 2026SingaporeFell to tier 2: manual operationConnectivity & data Human handoff

Missed security update to a shared DNS service disrupts all three Singapore public healthcare clusters for about nine and a half hours

On 13 October 2026 a disruption across Singapore's three public healthcare clusters (NHG Health, NUHS and SingHealth) affected appointment booking, visitor registration, medication dispensing and billing for about nine and a half hours. In its reply to parliamentary questions, the Ministry of Health said the cause was a required security update to a shared Domain Name System (DNS) service. Synapxe had contracted a service provider to do the update, and it was not done before a scheduled global change.[26,27,28]

PathConnectivity & data → Human handoff

8 October 2026Massachusetts, United StatesFell to tier 2: manual operationConnectivity & data Human handoff

Network outage takes computers offline across Mass General Brigham; hospitals move to downtime procedures

On 8 October 2026 a network outage took some computers and digital devices offline across Mass General Brigham. Its hospitals moved to downtime procedures, including paper forms, and some elective outpatient procedures did not go ahead. MGB said the outage was not linked to a cyberattack; the cause had not been stated.[29,30,31]

14 August 2026Nashville, Tennessee, United StatesFell to tier 1: assisted operationSingle sourceHuman handoff

Nashville hospital pharmacy dispenses potassium phosphate labelled as anaesthetic; state report says barcode scanning could be overridden

On 14 August 2026 four joint-replacement patients at Ascension Saint Thomas Midtown received potassium phosphate instead of the anaesthetic mepivacaine. NewsChannel 9 reported that a state survey report found the pharmacy system let technicians override barcode scanning, and that the pharmacist's final check also missed the wrong drug.[32,33,34]

August 2026Worldwide (US, Europe, Australia/New Zealand server models)Single sourceDevices Human handoff

LATITUDE Clarity server software can hold back AF Burden alerts from LUX-Dx implantable cardiac monitors

Boston Scientific notified clinics that its LATITUDE Clarity remote-monitoring server can delay AF Burden alerts from LUX-Dx insertable cardiac monitors until the next full device interrogation when a non-default threshold is set. The implanted monitors keep detecting and transmitting data; one complaint and no injuries were reported.[35,36]

June 2026Not stated (authors based at London NHS trusts)Models & agents Human handoff

Case report: chatbot affirmed a manic patient's delusions and discouraged his antipsychotic; care plan restricted its use

A BMC Psychiatry case report describes a man in his 30s with substance-induced manic psychosis whose ChatGPT conversations, according to the authors, affirmed his perceived 'spiritual awakening' and discouraged his prescribed antipsychotic. His inpatient care plan restricted AI chatbot use; the authors state that any contribution of the chatbot to his illness cannot be determined.[39,40]

Update pending

January 2026Arizona, New Jersey, Ohio, Oklahoma, Texas and Washington, United StatesFell to tier 1: assisted operationModels & agents Human handoff

Medicare's AI-assisted WISeR prior-authorization pilot: records and reporting describe long delays and erroneous denials

CMS's WISeR model, in which technology vendors use AI and machine learning to review prior-authorization requests in traditional Medicare, launched in January 2026 in six states. CMS records obtained by EFF and reporting by KFF Health News describe long delays, an erroneous denial and a vendor that said it would auto-approve requests until its system was fully functional.[45,46,47,48]

Update pending

19 July 2024Global; US hospitals including Mass General Brigham, Dana-Farber, Memorial Sloan Kettering, DukeFell to tier 2: manual operationDevices Connectivity & data Cascades Human handoff

CrowdStrike Falcon content update crashes Windows hosts, including hospital systems

A faulty Rapid Response Content update to CrowdStrike's Falcon sensor crashed about 8.5 million Windows devices worldwide. Outside-in measurement found disrupted services at 759 of 2,232 US hospitals studied.[55,56,57,58,59,60,61]

PathDevices → Connectivity & data → Human handoff

3 June 2024London, United KingdomFell to tier 2: manual operationConnectivity & data Cascades Human handoff

Synnovis pathology ransomware, South-East London

Ransomware hit Synnovis, the pathology provider for several south-east London NHS trusts and GP practices. Blood testing and matching collapsed, more than 11,000 appointments and procedures were postponed, O-type blood ran short nationally, and one death was later partly attributed to a delayed result.[62,63,64,65,66,67,68,69]

PathConnectivity & data → Human handoff

8 May 2024United States (Ascension, 140 hospitals in multiple states)Fell to tier 2: manual operationConnectivity & data Human handoff Cascades

Ascension ransomware and multi-week EHR downtime

A ransomware attack took Ascension's electronic records offline for about five weeks. Clinicians told KFF Health News of medication errors and delayed lab results, and one said he had no training for the attack; Ascension said its care teams were trained for such disruptions.[24,70]

Update pending

21 February 2024United States (national)Fell to tier 1: assisted operationConnectivity & data Cascades Human handoff

Change Healthcare ransomware and national claims/pharmacy clearinghouse outage

Attackers used stolen credentials on a Change Healthcare Citrix remote-access portal that had no multi-factor authentication, then deployed ransomware nine days later. Disconnecting the clearinghouse stalled pharmacy claims, medical claims and payments across the US.[71,72,73,74,75]

PathConnectivity & data → Human handoff

Update pending

How you'd know

  • Measure unaided performance after any AI rollout, not just AI-assisted performance. In colonoscopy, the non-AI adenoma detection rate is the metric that exposed deskilling.[11]
  • Track clinician-AI disagreement and override rates. Near-total agreement on a system with known error rates is a sign of automation bias, not accuracy.[1,3]
  • Count alarm signals per bed per day and the fraction that were actionable; several hundred per patient per day, with most non-actionable, predicts alarm fatigue.[12]
  • Track override rates by alert type. Rates approaching the 49 to 96 percent reported for drug alerts mean the alert is being ignored as a class.[19]
  • Search incident reports for 'downtime' and code whether procedures were in place and followed; in one analysis 46% of downtime-related reports said they were not.[22]
  • Time key tasks during downtime drills (first paper medication order, first critical lab result delivered) and compare with normal operation.[23,21]

What to do, tier by tier

What should already be in place at each degradation tier for this layer. Tier 0 is normal automated running; tier 3 is paper, batteries and judgement.

These are practices reported or recommended in the cited sources, gathered for reference. They are not a prescription for your organisation; judge what fits your setting, and check the current official text of any standard.

0Full automation

  • Keep a set of unaided cases for every AI-assisted task and report unaided performance to the department quarterly.[11,8]
  • Buy or build decision support that shows its inputs and reasoning so the clinician can check it, and treat time-critical uses as highest risk for automation bias.[4,1]
  • Inventory every alarm- and alert-generating system, AI and EHR alerts included, and name the role that responds to each and the response time expected.[15,12]
  • Retire or retune any alert class with an override rate above your threshold before adding a new one.[19,20]
  • For each AI tool, write down which function it automates (information gathering, analysis, choosing an action, or carrying it out) and at what level, and keep high-consequence action selection at a level where a clinician must actively decide.[109]
  • Train users that automation bias exists and emphasise their accountability for the final decision; both are among the few mitigators with evidence.[1]

1Assisted operation

  • Make every automation mode change visible and explained on screen: say what is off, since when, and what the clinician now owns.[9,7]
  • Write and rehearse takeover procedures for each known failure signature (model offline, feed stale, sensor disagreement), not a generic 'use clinical judgement'.[9,8]
  • Where verification is hard, reduce the clinician's cognitive load before asking them to check the AI; automation bias tracks verification complexity.[2]
  • Put a named human on every automated monitoring stream with a realistic watch load; do not rely on passive supervision of low-event streams.[10,8]

2Manual operation

  • Tailor alarm limits to the patient and change ECG electrodes and single-use sensors on the manufacturer's schedule to cut nuisance alarms.[12]
  • Write down who may set, change and turn off alarm parameters, and audit silenced or widened alarms on rounds.[15]
  • Test that critical alarm signals are audible in every area where the responder may be, including at night staffing levels.[12]
  • Specify alarm priority and signal conventions to IEC 60601-1-8 in procurement so devices from different vendors are distinguishable by urgency.[110]

3Analog fallback

  • Run an unannounced EHR downtime drill at least once a year on every clinical unit, and time the first paper order and first critical result.[21,111]
  • Train every clinician on paper ordering and charting and on activating the read-only backup EHR, and make sure they can find its login.[21]
  • Stock current paper forms for key EHR functions on each unit and write a patient-identification procedure for before, during and after downtime.[21,22]
  • Use one of the two exercises CMS already requires each year for a multi-day loss of the EHR and clinical systems, and revise the plan from what you learn.[112,25]
  • Keep a downtime communication channel that does not depend on the EHR's computing infrastructure.[21]

Standards and rules (US)

InstrumentWhat it requires
Joint Commission NPG.01.05.01, clinical alarm safety (hospitals and critical access hospitals, from January 2026; previously NPSG.06.01.01, effective 2014)Leaders make alarm safety a priority, identify the most important alarm signals, and set policies on alarm settings, when alarms may be disabled or changed, who has authority to set, change or turn them off, and monitoring and response; staff must be educated on the alarm systems they are responsible for. It generally does not cover CPOE or other IT alerts.[16]
42 CFR 482.15(d), CMS Conditions of Participation: emergency preparedness training and testingHospitals must train all staff in emergency procedures initially and at least every 2 years, demonstrate staff knowledge, and run at least two exercises a year (one full-scale or functional, one additional such as a tabletop), analysing and documenting each.[112]
ONC SAFER Guide: Contingency Planning (2025 revision)Voluntary self-assessment. Recommends paper forms for key EHR functions, training and testing staff on downtime and recovery (including unannounced drills at least yearly and read-only backup EHR use), EHR-independent communication, and review of downtimes over 24 hours.[21]
FDA, Clinical Decision Support Software guidance (January 29, 2026)Non-binding. Defines automation bias and treats the level of automation and the time-critical nature of the decision as factors in whether a clinician can independently review the basis of a recommendation (criterion 4 for non-device CDS).[4]
IEC 60601-1-8:2006+A1:2012 (Ed. 2.1), alarm systems collateral standardRequirements and tests for alarm systems in medical electrical equipment: alarm categories by urgency, consistent alarm signals and control states, and their marking.[110]

Elsewhere: EU and UK

The EU AI Act (Regulation (EU) 2024/1689) is the first law to name automation bias. Article 14(4)(b) requires high-risk AI systems to be provided so that overseers can remain aware of the tendency to over-rely on outputs, and 14(4)(d)-(e) require that they can disregard or override an output and stop the system safely. Article 26(2) requires deployers, such as hospitals, to assign human oversight to people with the necessary competence, training, authority and support. In England, DCB0160, mandated under section 250 of the Health and Social Care Act 2012, requires care organisations to apply clinical risk management to the deployment and use of health IT, which is where local handoff and downtime hazards are expected to be logged.[113,114,115]

Severity score v0.1 draft

4Likelihood
3Blast radius
4Detectability (5 = hardest)
48of 125

FailSystems judgementJudgement. Likelihood is high because alarm fatigue, alert override and weak downtime readiness are documented as common, not exceptional. Blast radius is usually one patient or one unit per event, but rises to system-wide when a large outage forces a whole network onto paper. Detectability is poor because skill loss and automation bias stay invisible until the handback, and routine metrics measure assisted rather than unaided performance.

Each factor is scored 1–5 and multiplied, as in a classic FMEA risk priority number. This is our first-draft judgement, not a measurement; see how scoring works and how it will be revised.

What we don't know yet

  • How fast does unaided skill decay after AI adoption, does it plateau, and does it recover when AI is withdrawn? Budzyń compared only three months before and after, in one specialty.
  • What drill frequency and format actually preserves paper-mode competence? SAFER recommends at least an annual unannounced drill, but outcome evidence for any frequency is thin.
  • Does showing the basis of a recommendation reduce automation bias under real time pressure, or only in experiments?
  • Who owns AI and EHR alerts that fall outside the Joint Commission's alarm-safety goal (NPG.01.05.01), and does any accreditor survey their response?
  • Will clinicians trained from the start with AI assistance ever develop the unaided skill the fallback plan assumes?

These gaps drive what the nightly research pass looks for. If you have evidence, send it.

Sources cited on this page

  1. Automation bias: a systematic review of frequency, effect mediators, and mitigators. Journal of the American Medical Informatics Association 19(1):121-127, January 2012. Primary Peer-reviewed · link checked 2026-11-02
  2. Automation bias and verification complexity: a systematic review. Journal of the American Medical Informatics Association 24(2):423-431, 1 March 2017. Primary Peer-reviewed · link checked 2026-11-02
  3. Automation Bias in Mammography: The Impact of Artificial Intelligence BI-RADS Suggestions on Reader Performance. Radiology 307(4):e222176 (RSNA), 2 May 2023. Primary Peer-reviewed · link checked 2026-11-02
  4. Clinical Decision Support Software: Guidance for Industry and FDA Staff. U.S. Food and Drug Administration, 29 January 2026. Primary Guidance · link checked 2026-11-02
  5. Humans and Automation: Use, Misuse, Disuse, Abuse. Human Factors 39(2):230-253, June 1997. Primary Peer-reviewed · link checked 2026-11-02
  6. Human factors challenges for the safe use of artificial intelligence in patient care. BMJ Health & Care Informatics 26(1), November 2019. Primary Peer-reviewed · link checked 2026-11-02
  7. The Out-of-the-Loop Performance Problem and Level of Control in Automation. Human Factors 37(2):381-394, June 1995. Primary Peer-reviewed · link checked 2026-11-02
  8. Ironies of Automation. Automatica 19(6):775-779 (Pergamon / IFAC), November 1983. Primary Peer-reviewed · link checked 2026-11-02
  9. Final Report: Accident on 1st June 2009 to the Airbus A330-203, flight AF 447 (presentation of the final report). BEA (Bureau d'Enquetes et d'Analyses), 5 July 2012. Primary Official report · link checked 2026-11-02
  10. Collision Between Vehicle Controlled by Developmental Automated Driving System and Pedestrian, Tempe, Arizona, March 18, 2018 (HAR-19-03). National Transportation Safety Board, 2019. Primary Official report · link checked 2026-11-02
  11. Endoscopist deskilling risk after exposure to artificial intelligence in colonoscopy: a multicentre, observational study. The Lancet Gastroenterology & Hepatology 10(10):896-903, 12 August 2025. Primary Peer-reviewed · link checked 2026-11-02
  12. Sentinel Event Alert Issue 50: Medical device alarm safety in hospitals. The Joint Commission, 8 April 2013. Secondary Official report · link checked 2026-11-02
  13. Alarm fatigue: a patient safety concern. AACN Advanced Critical Care 24(4):378-386, 2013. Primary Peer-reviewed · link checked 2026-11-02
  14. Monitor alarm fatigue: an integrative review. Biomedical Instrumentation & Technology 46(4):268-277 (AAMI), 2012. Primary Peer-reviewed · link checked 2026-11-02
  15. R3 Report Issue 5: Alarm system safety (NPSG.06.01.01). The Joint Commission, 11 December 2013. Primary Standard · link checked 2026-11-02
  16. National Performance Goals Effective January 2026 for the Hospital Program. The Joint Commission, 1 January 2026. Secondary Standard · link checked 2026-11-02
  17. Joint Commission Perspectives, July 2025 (Vol. 45, No. 7). The Joint Commission, 1 July 2025. Primary Guidance · link checked 2026-11-02
  18. National Patient Safety Goals, Effective January 2025 for the Hospital Program. The Joint Commission, 30 October 2024. Primary Standard · link checked 2026-11-02
  19. Overriding of drug safety alerts in computerized physician order entry. Journal of the American Medical Informatics Association 13(2):138-147, 2006. Primary Peer-reviewed · link checked 2026-11-02
  20. External Validation of a Widely Implemented Proprietary Sepsis Prediction Model in Hospitalized Patients. JAMA Internal Medicine (Wong A, Otles E, Donnelly JP, et al.), 21 June 2021. Primary Peer-reviewed · link checked 2026-11-02
  21. SAFER Guide: Contingency Planning (2025 edition). ASTP/ONC, US Department of Health and Human Services, 2025. Primary Guidance · link checked 2026-11-02
  22. Implications of electronic health record downtime: an analysis of patient safety event reports. Journal of the American Medical Informatics Association 25(2):187 (Larsen E, Fong A, Wernz C, Ratwani RM), February 2018. Primary Peer-reviewed · link checked 2026-11-02
  23. Continuing Patient Care during Electronic Health Record Downtime. Applied Clinical Informatics (Larsen E, Hoffman D, Rivera C, Kleiner BM, Wernz C, Ratwani RM), May 2019. Primary Peer-reviewed · link checked 2026-11-02
  24. Cyberattack led to harrowing lapses at Ascension hospitals, clinicians say. KFF Health News (Rachana Pradhan) and Michigan Public (Kate Wells); co-published by NPR, 20 June 2024. Secondary Journalism · link checked 2026-11-02
  25. Top 10 Health Technology Hazards for 2026: Executive Brief. ECRI, January 2026. Secondary Official report · link checked 2026-11-02
  26. Healthcare IT Disruption Resilience (reply to parliamentary questions on the 13 October 2026 disruption). Ministry of Health, Singapore, 3 November 2026. Primary Official report · link checked 2026-11-04
  27. MOH apologises for 'preventable lapse' leading to 9.5-hour public healthcare IT outage. Mothership, 3 November 2026. Supporting Journalism · link checked 2026-11-04
  28. All 3 public healthcare clusters experiencing system disruption, no indication of cyber incident: Health tech agency. Mothership, 13 October 2026. Supporting Journalism · link checked 2026-11-02
  29. Network outage hits Mass General Brigham hospitals; patient care continues. NBC10 Boston, 8 October 2026. Secondary Journalism · link checked 2026-11-02
  30. Mass General Brigham network outage. The Boston Globe, 8 October 2026. Secondary Journalism · link checked 2026-11-02
  31. Cooley Dickinson Hospital back online after network outage. Daily Hampshire Gazette, 9 October 2026. Supporting Journalism · link checked 2026-11-02
  32. Drug mix-up at Nashville hospital causes dire complications in 4 patients. CBS News, 21 August 2026. Secondary Journalism · link checked 2026-11-02
  33. State finds multiple safety failures after Ascension Saint Thomas medication mix-up. NewsChannel 9 (WTVC). Supporting Journalism · link checked 2026-11-02
  34. Ascension Saint Thomas Midtown Update. Ascension, September 2026. Supporting Official report · link checked 2026-11-02
  35. Class 2 Device Recall LUX-Dx Insertable Cardiac Monitor System, LATITUDE Clarity server software (Z-3081-2026). U.S. Food and Drug Administration (Medical Device Recalls database), 2 September 2026. Primary Dataset · link checked 2026-11-02
  36. Product Advisory – Potential delayed AF Burden Alert notification from LATITUDE Clarity (Field Action 97627645A-FA). Boston Scientific, August 2026. Supporting Guidance · link checked 2026-11-02
  37. Ambient AI in primary care: an exploratory mixed methods survey of UK general practitioners. BMJ Health & Care Informatics, July 2026. Primary Peer-reviewed · link checked 2026-11-08
  38. AI scribes cut workload but need oversight. HealthManagement.org, 28 July 2026. Supporting Journalism · link checked 2026-11-08
  39. Substance-induced manic psychosis in which delusions were corroborated by a chatbot - case report. BMC Psychiatry (Shah S, Morrin H), 4 June 2026. Primary Peer-reviewed · link checked 2026-11-02
  40. ChatGPT Was Written Out of a Manic Patient's Care Plan After It Affirmed His Delusions. Medical Daily, 25 September 2026. Supporting Journalism · link checked 2026-11-02
  41. Performance Audit: Use of Artificial Intelligence in the Ontario Government (Special Report 2026). Office of the Auditor General of Ontario, 12 May 2026. Primary Official report · link checked 2026-11-02
  42. AI systems used by Ontario doctors hallucinate, auditor general finds. Global News (Canada), 12 May 2026. Secondary Journalism · link checked 2026-11-02
  43. A pharmacy chain in Vermont implemented AI for efficiency. It's led to delays, incorrect information and privacy concerns. VTDigger, 29 July 2026. Secondary Journalism · link checked 2026-11-02
  44. Kinney Drugs pulls back AI phone assistant after hundreds of customer complaints. WCAX-TV, 7 August 2026. Secondary Journalism · link checked 2026-11-02
  45. WISeR (Wasteful and Inappropriate Service Reduction) Model. Centers for Medicare & Medicaid Services, 2025. Primary Official report · link checked 2026-11-02
  46. Medicare's AI Push Snarls Patients and Doctors in Errors and Delays. KFF Health News, 23 June 2026. Secondary Journalism · link checked 2026-11-02
  47. Medicare's AI prior authorization pilot was rushed and full of problems, new documents reveal. STAT, 15 September 2026. Secondary Journalism · link checked 2026-11-02
  48. New Records Reveal Problems with Medicare's AI Prior Authorization Experiment. Electronic Frontier Foundation, 8 September 2026. Supporting Journalism · link checked 2026-11-02
  49. As AI reshapes patient care, human nurses are pushing back against its creeping influence (AP). Associated Press via Euronews, 18 March 2025. Secondary Journalism · link checked 2026-11-02
  50. AI enters the exam room, and nurses are left to manage the fallout. Scientific American (Hilke Schellmann), 17 February 2026. Secondary Journalism · link checked 2026-11-02
  51. Infusion Pump Software Correction: BD Issues Correction for BD Alaris Systems Manager and Care Coordination Engine Infusion Adapter Software Due to Risk for Outdated Automated Programming Requests to Load. U.S. Food and Drug Administration, 18 February 2025. Primary Official report · link checked 2026-11-02
  52. BD Provides Update on Feb. 4, 2020 Voluntary Recall of the BD Alaris System PC Units and Modules. U.S. Food and Drug Administration (company announcement), 9 March 2020. Primary Official report · link checked 2026-11-02
  53. Careless Whisper: Speech-to-Text Hallucination Harms. ACM FAccT 2024 (Koenecke A, Choi ASG, Mei KX, Schellmann H, Sloane M); arXiv 2402.08021, June 2024. Primary Peer-reviewed · link checked 2026-11-02
  54. Researchers say an AI-powered transcription tool used in hospitals invents things no one ever said. Associated Press (syndicated via Scripps News), 26 October 2024. Secondary Journalism · link checked 2026-11-02
  55. External Technical Root Cause Analysis - Channel File 291. CrowdStrike, 6 August 2024. Supporting Official report · link checked 2026-11-02
  56. Testimony of Adam Meyers, CrowdStrike, before the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection: 'An Outage Strikes'. U.S. House Committee on Homeland Security, 24 September 2024. Primary Testimony / filing · link checked 2026-11-02
  57. Microsoft global outage forces hospitals to cancel appointments. STAT (Palmer K, Trang B, Ross C), 19 July 2024. Secondary Journalism · link checked 2026-11-02
  58. Patient Care Technology Disruptions Associated With the CrowdStrike Outage. JAMA Network Open (Tully JL, ... Dameff CJ), 1 July 2025. Primary Peer-reviewed · link checked 2026-11-02
  59. Helping our customers through the CrowdStrike outage. Microsoft (David Weston), 20 July 2024. Supporting Official report · link checked 2026-11-02
  60. Widespread IT Outage Due to CrowdStrike Update. CISA, 19 July 2024. Primary Guidance · link checked 2026-11-02
  61. A look at how Mass General Brigham recovered from the CrowdStrike outage. Healthcare Brew (Cassie McGrath), 11 September 2024. Secondary Journalism · link checked 2026-11-02
  62. Synnovis cyber incident (update of 10 November 2025). NHS England, 10 November 2025. Primary Official report · link checked 2026-11-02
  63. NHS Ransomware Hack Caused Patient Harm in UK, Data Shows. Bloomberg News (Ryan Gallagher), 14 January 2025. Secondary Journalism · link checked 2026-11-02
  64. Ransomware attack contributed to patient's death, says Britain's NHS. The Record by Recorded Future News (Alexander Martin), 25 June 2025. Secondary Journalism · link checked 2026-11-02
  65. Synnovis cyber update. Synnovis, 2025. Supporting Official report · link checked 2026-11-02
  66. O Positive and O Negative donors asked to urgently book appointments to give blood following London hospitals IT incident. NHS Blood and Transplant, 10 June 2024. Primary Official report · link checked 2026-11-02
  67. Qilin ransomware attack on NHS supplier contributed to patient fatality. The Register, 26 June 2025. Secondary Journalism · link checked 2026-11-02
  68. Ransomware attack continues to disrupt healthcare in London nearly two years later. The Record (Recorded Future News), 2026. Secondary Journalism · link checked 2026-11-02
  69. Cyber Security and Resilience (Network and Information Systems) Bill factsheet: Designating critical suppliers. UK Government (GOV.UK), 30 June 2026. Primary Guidance · link checked 2026-11-02
  70. The state-by-state impact of Ascension's cyberattack. Healthcare Dive, 2024. Secondary Journalism · link checked 2026-11-02
  71. Testimony of Andrew Witty, CEO, UnitedHealth Group, before the Senate Finance Committee: 'Hacking America's Health Care: Assessing the Change Healthcare Cyber Attack and What's Next'. US Senate Committee on Finance, 1 May 2024. Primary Testimony / filing · link checked 2026-11-02
  72. AHA Survey: Change Healthcare Cyberattack Significantly Disrupts Patient Care, Hospitals' Finances. American Hospital Association, 15 March 2024. Secondary Journalism · link checked 2026-11-02
  73. Change Healthcare Cyberattack Underscores Urgent Need to Strengthen Cyber Preparedness for Individual Health Care Organizations and as a Field. American Hospital Association, 2025. Secondary Official report · link checked 2026-11-02
  74. UnitedHealth hikes number of Change cyberattack breach victims to 190 million. Healthcare Dive (Emily Olsen), 27 January 2025. Secondary Journalism · link checked 2026-11-02
  75. HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information (NPRM, FR Doc 2024-30983). HHS Office for Civil Rights, Federal Register 90(3):898-1022, 6 January 2025. Primary Regulation · link checked 2026-11-02
  76. UnitedHealth uses faulty AI to deny elderly patients medically necessary coverage, lawsuit claims. CBS News, 20 November 2023. Secondary Journalism · link checked 2026-11-02
  77. Federal judge trims AI denial lawsuit against UnitedHealth Group. Courthouse News Service, 13 February 2025. Secondary Journalism · link checked 2026-11-02
  78. Refusal of Recovery: How Medicare Advantage Insurers Have Denied Patients Access to Post-Acute Care. U.S. Senate Permanent Subcommittee on Investigations (Majority Staff), 17 October 2024. Primary Official report · link checked 2026-11-02
  79. Frequently Asked Questions related to Coverage Criteria and Utilization Management Requirements in CMS Final Rule (CMS-4201-F) (HPMS memo). Centers for Medicare & Medicaid Services, 6 February 2024. Primary Guidance · link checked 2026-11-02
  80. Multicenter Prospective Validation of an Updated Proprietary Sepsis Prediction Model. JAMA Network Open (Wong A, Currey D, Schwinne M, et al.), 2 February 2026. Primary Peer-reviewed · link checked 2026-11-02
  81. Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US. JAMA Network Open (Dameff C, Tully J, Chan TC, et al.), 8 May 2023. Primary Peer-reviewed · link checked 2026-11-02
  82. Sentinel Event Alert Issue 67: Preserving patient safety after a cyberattack. The Joint Commission, 15 August 2023. Primary Guidance · link checked 2026-11-02
  83. The February 2021 Cold Weather Outages in Texas and the South Central United States — FERC, NERC and Regional Entity Joint Staff Report (presentation of findings). FERC / NERC, November 2021. Primary Official report · link checked 2026-11-02
  84. Austin hospitals lose water pressure and heat amid winter storm. The Texas Tribune, 17 February 2021. Secondary Journalism · link checked 2026-11-02
  85. February 2021 Winter Storm-Related Deaths – Texas. Texas Department of State Health Services, 31 December 2021. Primary Official report · link checked 2026-11-02
  86. The February 2021 Cold Weather Outages in Texas and the South Central United States — Tracking of Responses to Recommendations. FERC (with NERC and Regional Entity staff), December 2022. Primary Official report · link checked 2026-11-02
  87. Boil-Water Advisory in Effect, Low Water Pressure Impacts Austin Hospitals. Circle of Blue, 18 February 2021. Secondary Journalism · link checked 2026-11-02
  88. Texas' power outages, water shortages put bigger strain on hospitals. ABC News, 18 February 2021. Secondary Journalism · link checked 2026-11-02
  89. The New Electronic Health Record's Unknown Queue Caused Multiple Events of Patient Harm (Report 22-01137-204). VA Office of Inspector General, 14 July 2022. Primary Official report · link checked 2026-11-02
  90. The Clinician and Dataset Shift in Artificial Intelligence. New England Journal of Medicine (Finlayson SG, Subbaswamy A, Singh K, et al.), 15 July 2021. Primary Peer-reviewed · link checked 2026-11-02
  91. Quantification of Sepsis Model Alerts in 24 US Hospitals Before and During the COVID-19 Pandemic. JAMA Network Open (Wong A, Cao J, Lyons PG, et al.), 1 November 2021. Primary Peer-reviewed · link checked 2026-11-02
  92. Investigation: WannaCry cyber attack and the NHS. National Audit Office (UK), 27 October 2017. Primary Official report · link checked 2026-11-02
  93. Lessons learned review of the WannaCry Ransomware Cyber Attack. Department of Health and Social Care / NHS England (William Smart, CIO for Health and Social Care), 1 February 2018. Primary Official report · link checked 2026-11-02
  94. A retrospective impact analysis of the WannaCry cyberattack on the NHS. npj Digital Medicine, 2 October 2019. Primary Peer-reviewed · link checked 2026-11-02
  95. Princeton hospital to replace 12-hundred computer hard drives after cyber attack. WV MetroNews (Carrie Hodousek), 30 June 2017. Secondary Journalism · link checked 2026-11-02
  96. Cyber attack prompts Princeton Community Hospital to rebuild network. Bluefield Daily Telegraph (Blake Stowers), 29 June 2017. Secondary Journalism · link checked 2026-11-02
  97. What caused generators to fail at NYC hospitals?. CBS News / Associated Press, 2 November 2012. Secondary Journalism · link checked 2026-11-02
  98. Evacuation of a neonatal intensive care unit in a disaster: lessons from Hurricane Sandy. Pediatrics (American Academy of Pediatrics), 2014. Primary Peer-reviewed · link checked 2026-11-02
  99. Hospital Emergency Preparedness and Response During Superstorm Sandy (OEI-06-13-00260). US HHS Office of Inspector General, 16 September 2014. Primary Official report · link checked 2026-11-02
  100. MGH death spurs review of patient monitors. The Boston Globe (Liz Kowalczyk), 21 February 2010. Secondary Journalism · link checked 2026-11-02
  101. Patient alarms often unheard, unheeded. The Boston Globe (Liz Kowalczyk), 13 February 2011. Secondary Journalism · link checked 2026-11-02
  102. Safety Investigation Following the Accident on 1st June 2009 to the Airbus A330-203, flight AF447: summary (Le Bourget, 5 July 2012). BEA (copy hosted by humanfactors101.com), 5 July 2012. Primary Official report · link checked 2026-11-02
  103. The Deadly Choices at Memorial. ProPublica / The New York Times Magazine (Sheri Fink), 27 August 2009. Secondary Journalism · link checked 2026-11-02
  104. Hospitals in Hurricane Katrina: Challenges Facing Custodial Institutions in a Disaster. The Urban Institute (Bradford H. Gray, Kathy Hebert), 1 July 2006. Secondary Official report · link checked 2026-11-02
  105. A Failure of Initiative (H. Rpt. 109-377), Medical Care chapter. U.S. House Select Bipartisan Committee on Hurricane Katrina (mirror: LSU Law biotech.law.lsu.edu), 15 February 2006. Primary Official report · link checked 2026-11-02
  106. Halamka on Beth Israel's Health-Care IT Disaster. CIO Magazine (Scott Berinato), 15 February 2003. Secondary Journalism · link checked 2026-11-02
  107. All Systems Down. CIO / Computerworld (Scott Berinato), 25 February 2003. Secondary Journalism · link checked 2026-11-02
  108. Computer crash - lessons from a system failure. New England Journal of Medicine 348(10):881-882, 6 March 2003. Primary Peer-reviewed · link checked 2026-11-02
  109. A Model for Types and Levels of Human Interaction with Automation. IEEE Transactions on Systems, Man, and Cybernetics Part A 30(3):286-297, May 2000. Primary Peer-reviewed · link checked 2026-11-02
  110. IEC 60601-1-8:2006+AMD1:2012 CSV (Ed. 2.1) Medical electrical equipment - Part 1-8: alarm systems. International Electrotechnical Commission, 28 November 2012. Primary Standard · link checked 2026-11-02
  111. How Complex Systems Fail. Richard I. Cook, Cognitive Technologies Laboratory, University of Chicago, 1998. Secondary Book · link checked 2026-11-02
  112. 42 CFR 482.15 Condition of participation: Emergency preparedness (hospitals). eCFR / CMS. Primary Regulation · link checked 2026-11-02
  113. Regulation (EU) 2024/1689 (Artificial Intelligence Act). European Parliament and Council of the EU (EUR-Lex), 13 June 2024. Primary Regulation · link checked 2026-11-02
  114. EU AI Act Explorer: Article 14 (Human Oversight) and Article 26 (Obligations of Deployers). Future of Life Institute (artificialintelligenceact.eu), 2024. Supporting Regulation · link checked 2026-11-02
  115. DCB0160: Clinical Risk Management: its Application in the Deployment and Use of Health IT Systems. NHS England (NHS Standards Directory), 7 June 2018. Primary Standard · link checked 2026-11-02

Cite this pageFailSystems. “The human handoff.” https://failsystems.health201.com/layers/handoff/ (reviewed 2026-09-27). Health 201 / AstroNexus LLC. CC BY 4.0.

Information only, not advice. FailSystems is an aggregation and synthesis of published sources. It is not consulting, engineering, legal, regulatory or medical advice, and using it creates no professional relationship. Health systems are complex and no approach fits every organisation: anything you adopt is your own decision, at your own risk, and should be checked against the current official sources and by qualified people who know your setting. Full disclaimer.

Dealing with an incident right now? This site is a reference, not an incident-response service. Activate your organisation's emergency operations plan and incident command, and: