From Health 201FailSystems

Primary: regulators, standards bodies, peer-reviewed papers, official investigations, sworn testimony and filings. Secondary: major news organisations, professional societies and established safety NGOs. Supporting: vendor documents, blogs and preprints, never cited alone. See the method.

Primary sources (164)

1. Alarm fatigue: a patient safety concern. AACN Advanced Critical Care 24(4):378-386, 2013. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: The human handoff
2. Careless Whisper: Speech-to-Text Hallucination Harms. ACM FAccT 2024 (Koenecke A, Choi ASG, Mei KX, Schellmann H, Sloane M); arXiv 2402.08021, June 2024. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: Models & agents, The human handoff, Whisper-based medical transcription invents text, and the audio is deleted
3. Evaluation of causes and frequency of medication errors during information technology downtime. Am J Health-Syst Pharm 66(12):1119-1124, 15 June 2009. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: Degradation tiers
4. Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region. Amazon Web Services, October 2025. Primary Official report · link checked 2026-09-26
   Cited on: Power & infrastructure, Connectivity & data, Cascades, AWS us-east-1 DynamoDB DNS failure disrupts cloud-hosted clinical systems
5. Summary of the AWS Service Event in the Northern Virginia (US-EAST-1) Region. Amazon Web Services, December 2021. Primary Official report · link checked 2026-09-26
   Cited on: Power & infrastructure, Connectivity & data
6. Hacked to Pieces? The Effects of Ransomware Attacks on Hospitals and Patients. American Economic Journal: Economic Policy 18(1):256-81 (Neprash H, McGlave C, Nikpay S), February 2026. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: Connectivity & data
7. All CLEAR? Preparing for IT Downtime. American Journal of Medical Quality 32(5):547-551, 30 August 2016. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: Degradation tiers
8. Continuing Patient Care during Electronic Health Record Downtime. Applied Clinical Informatics (Larsen E, Hoffman D, Rivera C, Kleiner BM, Wernz C, Ratwani RM), May 2019. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: Connectivity & data, The human handoff, Degradation tiers
9. What Goes Up, Must Come Down: A State-of-the-Art Electronic Health Record Downtime and Uptime Procedure in a Metropolitan Health Setting. Applied Clinical Informatics 14(3):513-520, 5 July 2023. Primary Peer-reviewed · link checked 2026-09-26
   Cited on: Degradation tiers
10. HTI-5 Proposed Rule fact sheet: ONC Deregulatory Actions to Unleash Prosperity. ASTP/ONC, 22 December 2025. Primary Regulation · link checked 2026-09-26
    Cited on: Models & agents
11. 45 CFR 170.315(b)(11) Decision support interventions (ONC Health IT Certification criterion). ASTP/ONC, U.S. Department of Health and Human Services (eCFR), 9 January 2024. Primary Regulation · link checked 2026-09-26
    Cited on: Models & agents
12. SAFER Guide: Contingency Planning (2025 edition). ASTP/ONC, US Department of Health and Human Services, 2025. Primary Guidance · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, The human handoff, Cascades, Degradation tiers, Beth Israel Deaconess network collapse
13. Ironies of Automation. Automatica 19(6):775-779 (Pergamon / IFAC), November 1983. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff, Degradation tiers
14. Final Report: Accident on 1st June 2009 to the Airbus A330-203, flight AF 447 (presentation of the final report). BEA (Bureau d'Enquetes et d'Analyses), 5 July 2012. Primary Official report · link checked 2026-09-26
    Cited on: The human handoff, Air France 447: autopilot hands a stalled aircraft back to a crew (non-clinical analogue)
15. Safety Investigation Following the Accident on 1st June 2009 to the Airbus A330-203, flight AF447: summary (Le Bourget, 5 July 2012). BEA (copy hosted by humanfactors101.com), 5 July 2012. Primary Official report · link checked 2026-09-26
    Cited on: The human handoff, Air France 447: autopilot hands a stalled aircraft back to a crew (non-clinical analogue)
16. Monitor alarm fatigue: an integrative review. Biomedical Instrumentation & Technology 46(4):268-277 (AAMI), 2012. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff
17. The Swiss cheese model of safety incidents: are there holes in the metaphor?. BMC Health Services Research 5:71, 2005. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Cascades
18. Human error: models and management. BMJ 320(7237):768-770, 2000. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Cascades
19. Human factors challenges for the safe use of artificial intelligence in patient care. BMJ Health & Care Informatics 26(1), November 2019. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff
20. Hospital Incident Command System Guidebook, Fifth Edition. California Emergency Medical Services Authority, May 2014. Primary Guidance · link checked 2026-09-26
    Cited on: Degradation tiers
21. Frequently Asked Questions related to Coverage Criteria and Utilization Management Requirements in CMS Final Rule (CMS-4201-F) (HPMS memo). Centers for Medicare & Medicaid Services, 6 February 2024. Primary Guidance · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Post-acute care denials rose as UnitedHealthcare automated prior authorization; lawsuit targets nH Predict
22. SAFER Guides requirements: Medicare Promoting Interoperability Program and MIPS Promoting Interoperability (infographic). Centers for Medicare & Medicaid Services, 2023. Primary Regulation · link checked 2026-09-26
    Cited on: Connectivity & data
23. Widespread IT Outage Due to CrowdStrike Update. CISA, 19 July 2024. Primary Guidance · link checked 2026-09-26
    Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
24. #StopRansomware: Black Basta (AA24-131A). CISA, FBI, HHS, MS-ISAC, 10 May 2024. Primary Guidance · link checked 2026-09-26
    Cited on: Connectivity & data
25. State Operations Manual Appendix Z: Emergency Preparedness for All Provider and Certified Supplier Types, Interpretive Guidance (Rev. 204). CMS, 16 April 2021. Primary Guidance · link checked 2026-09-26
    Cited on: Degradation tiers
26. Power Outages and Community Health: a Narrative Review. Current Environmental Health Reports, 2020. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Power & infrastructure
27. ICS Medical Advisory ICSMA-25-030-01: Contec Health CMS8000 Patient Monitor (Update A). Cybersecurity and Infrastructure Security Agency, 30 January 2025. Primary Official report · link checked 2026-09-26
    Cited on: Connectivity & data, Devices & electronics, Contec CMS8000 patient monitors: hidden remote-access function disclosed by CISA and FDA
28. Cyber security strategy for health and social care: 2023 to 2030. Department of Health and Social Care (UK), 22 March 2023. Primary Guidance · link checked 2026-09-26
    Cited on: Connectivity & data
29. Lessons learned review of the WannaCry Ransomware Cyber Attack. Department of Health and Social Care / NHS England (William Smart, CIO for Health and Social Care), 1 February 2018. Primary Official report · link checked 2026-09-26
    Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, WannaCry ransomware across the NHS in England
30. Effectiveness of CBRNE Event-Response Training in a Hospital Setting: A Scoping Review. Disaster Medicine and Public Health Preparedness 20:e2, 23 December 2025. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
31. Patient safety during IT outages in hospitals. Dutch Safety Board (Onderzoeksraad voor Veiligheid), 13 February 2020. Primary Official report · link checked 2026-09-26
    Cited on: Cascades
32. 42 CFR 482.15 Condition of participation: Emergency preparedness (hospitals). eCFR / CMS. Primary Regulation · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, The human handoff, Cascades, Degradation tiers
33. 45 CFR 164.308(a)(7) Contingency plan (HIPAA Security Rule, administrative safeguards). eCFR / US Government. Primary Regulation · link checked 2026-09-26
    Cited on: Connectivity & data
34. Final Report on the Grid Incident in Spain and Portugal on 28 April 2025. ENTSO-E Expert Panel, 20 March 2026. Primary Official report · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Devices & electronics, Cascades, Iberian Peninsula blackout
35. Lights out: impact of the August 2003 power outage on mortality in New York, NY. Epidemiology, 2012. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Power & infrastructure, Cascades, Northeast blackout: New York City hospital generators fail
36. AI Act (Regulation (EU) 2024/1689): regulatory framework overview. European Commission, Shaping Europe's digital future, 1 August 2024. Primary Regulation · link checked 2026-09-26
    Cited on: Models & agents
37. Digital Omnibus on AI (Legislative Train Schedule). European Parliament, 8 July 2026. Primary Regulation · link checked 2026-09-26
    Cited on: Models & agents
38. Directive (EU) 2022/2555 (NIS 2 Directive). European Parliament and Council (EUR-Lex), 14 December 2022. Primary Regulation · link checked 2026-09-26
    Cited on: Cascades
39. Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive). European Parliament and Council / EUR-Lex; summary by European Commission, 14 December 2022. Primary Regulation · link checked 2026-09-26
    Cited on: Connectivity & data
40. Regulation (EU) 2024/1689 (Artificial Intelligence Act). European Parliament and Council of the EU (EUR-Lex), 13 June 2024. Primary Regulation · link checked 2026-09-26
    Cited on: The human handoff
41. ENISA Threat Landscape: Health Sector (press release 'Checking-up on Health: Ransomware Accounts for 54% of Cybersecurity Threats'). European Union Agency for Cybersecurity (ENISA), 5 July 2023. Primary Official report · link checked 2026-09-26
    Cited on: Connectivity & data
42. Medicare and Medicaid Programs; Emergency Preparedness Requirements for Medicare and Medicaid Participating Providers and Suppliers (81 FR 63860). Federal Register / CMS, 16 September 2016. Primary Regulation · link checked 2026-09-26
    Cited on: Power & infrastructure
43. Medicare and Medicaid Programs; Fire Safety Requirements for Certain Health Care Facilities (81 FR 26872). Federal Register / CMS, 4 May 2016. Primary Regulation · link checked 2026-09-26
    Cited on: Power & infrastructure
44. The February 2021 Cold Weather Outages in Texas and the South Central United States — Tracking of Responses to Recommendations. FERC (with NERC and Regional Entity staff), December 2022. Primary Official report · link checked 2026-09-26
    Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Texas winter storm: record load shed, hospitals lose water and heat
45. The February 2021 Cold Weather Outages in Texas and the South Central United States — FERC, NERC and Regional Entity Joint Staff Report (presentation of findings). FERC / NERC, November 2021. Primary Official report · link checked 2026-09-26
    Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Texas winter storm: record load shed, hospitals lose water and heat
46. When the lights went out: impacts of the April 2025 Iberian blackout on the Portuguese National Health Service sovereignty. Frontiers in Public Health, 2025. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Devices & electronics, Cascades, Iberian Peninsula blackout
47. Incident: cooling related failure in one of our buildings that hosts zone europe-west2-a. Google Cloud Service Health, 19 July 2022. Primary Official report · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Cascades, Guy's and St Thomas': heatwave cooling failure takes down both data centres
48. Review of the Guy's and St Thomas' IT Critical Incident — Final report from the Deputy Chief Executive Officer. Guy's and St Thomas' NHS Foundation Trust, January 2023. Primary Official report · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Cascades, Guy's and St Thomas': heatwave cooling failure takes down both data centres
49. Healthcare and Public Health (HPH) Sector Cybersecurity Performance Goals. HHS (with CISA), 2024. Primary Guidance · link checked 2026-09-26
    Cited on: Connectivity & data
50. Hospital Cyber Resiliency Initiative Landscape Analysis. HHS 405(d) / Health Sector Coordinating Council with CMS, April 2023. Primary Official report · link checked 2026-09-26
    Cited on: Cascades
51. Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients (HICP), 2023 Edition. HHS 405(d) Program / Health Sector Coordinating Council, 2023. Primary Guidance · link checked 2026-09-26
    Cited on: Connectivity & data
52. Electronic Health Records and Downtime Procedures Topic Collection. HHS ASPR TRACIE, 2 December 2025. Primary Guidance · link checked 2026-09-26
    Cited on: Degradation tiers
53. Health Care Facility-Level Extended Downtime Assessment. HHS ASPR TRACIE, 2026. Primary Guidance · link checked 2026-09-26
    Cited on: Degradation tiers
54. Healthcare System Cybersecurity: Readiness & Response Considerations (updated October 2022). HHS ASPR TRACIE, October 2022. Primary Guidance · link checked 2026-09-26
    Cited on: Degradation tiers
55. Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information. HHS Office for Civil Rights. Primary Dataset · link checked 2026-09-26
    Cited on: Connectivity & data
56. HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information (NPRM, FR Doc 2024-30983). HHS Office for Civil Rights, Federal Register 90(3):898-1022, 6 January 2025. Primary Regulation · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Change Healthcare ransomware and national claims/pharmacy clearinghouse outage
57. The Out-of-the-Loop Performance Problem and Level of Control in Automation. Human Factors 37(2):381-394, June 1995. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff
58. Humans and Automation: Use, Misuse, Disuse, Abuse. Human Factors 39(2):230-253, June 1997. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff
59. A Model for Types and Levels of Human Interaction with Automation. IEEE Transactions on Systems, Man, and Cybernetics Part A 30(3):286-297, May 2000. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff, Degradation tiers
60. IEC 60601-1-8:2006+AMD1:2012 CSV (Ed. 2.1) Medical electrical equipment - Part 1-8: alarm systems. International Electrotechnical Commission, 28 November 2012. Primary Standard · link checked 2026-09-26
    Cited on: The human handoff
61. IEC 60601-1-8:2006+AMD1:2012+AMD2:2020 CSV Alarm systems in medical electrical equipment and systems. International Electrotechnical Commission, 23 July 2020. Primary Standard · link checked 2026-09-26
    Cited on: Devices & electronics
62. IEC 62304:2006+AMD1:2015 CSV Medical device software - Software life cycle processes. International Electrotechnical Commission, 26 June 2015. Primary Standard · link checked 2026-09-26
    Cited on: Devices & electronics
63. IEC 80001-1:2021 Safety, effectiveness and security in the implementation and use of connected medical devices or connected health software - Part 1: Application of risk management. International Electrotechnical Commission, 21 September 2021. Primary Standard · link checked 2026-09-26
    Cited on: Devices & electronics
64. Contingency planning for electronic health record-based care continuity: a survey of recommended practices. International Journal of Medical Informatics 83(11):797-804 (Sittig DF, Gonzalez D, Singh H), 2014. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data
65. Analysis of clinical decision support system malfunctions: a case series and survey. J Am Med Inform Assoc 23(6):1068-1076, 28 March 2016. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
66. Association of Power Outage With Mortality and Hospitalizations Among Florida Nursing Home Residents After Hurricane Irma. JAMA Health Forum, November 2021. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Power & infrastructure, Cascades, Hurricane Irma: nursing home loses air conditioning while power stays on
67. Trends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021. JAMA Health Forum (Neprash HT, McGlave CC, Cross DA, et al.), 29 December 2022. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data
68. Racial and Ethnic Discrepancy in Pulse Oximetry and Delayed Identification of Treatment Eligibility Among Patients With COVID-19. JAMA Internal Medicine (Fawzy A, et al.), 1 July 2022. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Devices & electronics, Models & agents, Pulse oximeters overestimate oxygen saturation in patients with darker skin
69. External Validation of a Widely Implemented Proprietary Sepsis Prediction Model in Hospitalized Patients. JAMA Internal Medicine (Wong A, Otles E, Donnelly JP, et al.), 21 June 2021. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Epic Sepsis Model missed two-thirds of sepsis cases in external validation
70. Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US. JAMA Network Open (Dameff C, Tully J, Chan TC, et al.), 8 May 2023. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Degradation tiers, Ransomware spillover to adjacent San Diego emergency departments
71. Patient Care Technology Disruptions Associated With the CrowdStrike Outage. JAMA Network Open (Tully JL, ... Dameff CJ), 1 July 2025. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, Degradation tiers, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
72. Quantification of Sepsis Model Alerts in 24 US Hospitals Before and During the COVID-19 Pandemic. JAMA Network Open (Wong A, Cao J, Lyons PG, et al.), 1 November 2021. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Sepsis model switched off after COVID-19 changed the patient mix
73. Multicenter Prospective Validation of an Updated Proprietary Sepsis Prediction Model. JAMA Network Open (Wong A, Currey D, Schwinne M, et al.), 2 February 2026. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Epic Sepsis Model missed two-thirds of sepsis cases in external validation
74. Implementing a Large-Scale Escape Room: An Intervention to Increase Electronic Health Record Downtime Competence. Journal for Nurses in Professional Development 39(6):316-321, 2022. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
75. Measuring the effects of computer downtime on hospital pathology processes. Journal of Biomedical Informatics 59:308-315, February 2016. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
76. Electronic health record downtime responses: One health system's process for ongoing readiness. Journal of Business Continuity & Emergency Planning 18(1):39-48, 2024. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
77. Downtime procedures for a clinical information system: a critical issue. Journal of Critical Care 22(1):45-50, March 2007. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
78. Clinical Cybersecurity Training Through Novel High-Fidelity Simulations. Journal of Emergency Medicine 56(2):233-238, December 2018. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
79. What happens to rural hospitals during a ransomware attack? Evidence from Medicare data. Journal of Rural Health (Neprash HT, McGlave CC, Rydberg K, Henning-Smith C), 17 March 2024. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data
80. Overriding of drug safety alerts in computerized physician order entry. Journal of the American Medical Informatics Association 13(2):138-147, 2006. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff
81. Automation bias: a systematic review of frequency, effect mediators, and mitigators. Journal of the American Medical Informatics Association 19(1):121-127, January 2012. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff, Degradation tiers
82. Problems with health information technology and their effects on care delivery and patient outcomes: a systematic review. Journal of the American Medical Informatics Association 24(2):246-250 (Kim MO, Coiera E, Magrabi F), March 2017. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data
83. Automation bias and verification complexity: a systematic review. Journal of the American Medical Informatics Association 24(2):423-431, 1 March 2017. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: The human handoff
84. Implications of electronic health record downtime: an analysis of patient safety event reports. Journal of the American Medical Informatics Association 25(2):187 (Larsen E, Fong A, Wernz C, Ratwani RM), February 2018. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Degradation tiers
85. The effects and preventability of 2627 patient safety incidents related to health information technology failures. Lancet Digital Health 1(3):e127-e135, 27 June 2019. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Degradation tiers
86. First major overhaul of medical device regulation comes into force across Great Britain. Medicines and Healthcare products Regulatory Agency (GOV.UK), 16 June 2025. Primary Regulation · link checked 2026-09-26
    Cited on: Devices & electronics
87. AI Airlock Sandbox Pilot Programme Report. Medicines and Healthcare products Regulatory Agency (UK), 16 October 2025. Primary Official report · link checked 2026-09-26
    Cited on: Models & agents
88. Human and Computer Control of Undersea Teleoperators (MIT Man-Machine Systems Laboratory technical report). MIT / Office of Naval Research (DTIC AD-A057655), 1978. Primary Official report · link checked 2026-09-26
    Cited on: Degradation tiers
89. CAST Handbook: How to Learn More from Incidents and Accidents. Nancy G. Leveson, MIT Partnership for Systems Approaches to Safety and Security, 2019. Primary Guidance · link checked 2026-09-26
    Cited on: Cascades
90. CAST Handbook: A "Systems Thinking" Approach to the Investigation of Healthcare Adverse Events (Draft). Nancy Leveson, MIT, 28 January 2024. Primary Guidance · link checked 2026-09-26
    Cited on: Cascades
91. Investigation: WannaCry cyber attack and the NHS. National Audit Office (UK), 27 October 2017. Primary Official report · link checked 2026-09-26
    Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, WannaCry ransomware across the NHS in England
92. NFPA 110, Standard for Emergency and Standby Power Systems (2025 edition). National Fire Protection Association, 2025. Primary Standard · link checked 2026-09-26
    Cited on: Power & infrastructure
93. Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1. National Institute of Standards and Technology, January 2023. Primary Standard · link checked 2026-09-26
    Cited on: Models & agents
94. Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile, NIST AI 600-1. National Institute of Standards and Technology, July 2024. Primary Standard · link checked 2026-09-26
    Cited on: Models & agents
95. Collision Between Vehicle Controlled by Developmental Automated Driving System and Pedestrian, Tempe, Arizona, March 18, 2018 (HAR-19-03). National Transportation Safety Board, 2019. Primary Official report · link checked 2026-09-26
    Cited on: The human handoff, Uber automated test vehicle kills pedestrian while safety operator is distracted (non-clinical analogue)
96. Excess mortality attributable to the 2025 Iberian Peninsula blackout. Nature Communications, July 2026. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Devices & electronics, Cascades, Iberian Peninsula blackout
97. The Clinician and Dataset Shift in Artificial Intelligence. New England Journal of Medicine (Finlayson SG, Subbaswamy A, Singh K, et al.), 15 July 2021. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Sepsis model switched off after COVID-19 changed the patient mix
98. Racial Bias in Pulse Oximetry Measurement. New England Journal of Medicine (Sjoding MW, Dickson RP, Iwashyna TJ, Gay SE, Valley TS), 17 December 2020. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Devices & electronics, Models & agents, Pulse oximeters overestimate oxygen saturation in patients with darker skin
99. Computer crash - lessons from a system failure. New England Journal of Medicine 348(10):881-882, 6 March 2003. Primary Peer-reviewed · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Beth Israel Deaconess network collapse
100. O Positive and O Negative donors asked to urgently book appointments to give blood following London hospitals IT incident. NHS Blood and Transplant, 10 June 2024. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, The human handoff, Cascades, Degradation tiers, Synnovis pathology ransomware, South-East London
101. Health Technical Memorandum 06-01: Electrical services supply and distribution. NHS England, 11 April 2017. Primary Guidance · link checked 2026-09-26
     Cited on: Power & infrastructure
102. Synnovis cyber incident (update of 10 November 2025). NHS England, 10 November 2025. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, The human handoff, Cascades, Synnovis pathology ransomware, South-East London
103. DCB0160: Clinical Risk Management: its Application in the Deployment and Use of Health IT Systems. NHS England (NHS Standards Directory), 7 June 2018. Primary Standard · link checked 2026-09-26
     Cited on: The human handoff
104. NIST SP 800-161 Rev. 1: Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations. NIST, May 2022. Primary Standard · link checked 2026-09-26
     Cited on: Cascades
105. A retrospective impact analysis of the WannaCry cyberattack on the NHS. npj Digital Medicine, 2 October 2019. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, WannaCry ransomware across the NHS in England
106. A framework to assess clinical safety and hallucination rates of LLMs for medical text summarisation. npj Digital Medicine (Asgari E, et al.; authors affiliated with Tortus AI), 13 May 2025. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Models & agents
107. Large language models propagate race-based medicine. npj Digital Medicine (Omiye JA, Lester JC, Spichak S, Rotemberg V, Daneshjou R), 20 October 2023. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Models & agents
108. Performance Audit: Use of Artificial Intelligence in the Ontario Government (Special Report 2026). Office of the Auditor General of Ontario, 12 May 2026. Primary Official report · link checked 2026-09-26
     Cited on: Models & agents, The human handoff, Ontario auditor: all 20 approved AI scribes produced inaccurate notes in testing
109. 21 U.S.C. 360n-2 (FD&C Act section 524B): Ensuring cybersecurity of devices. Office of the Law Revision Counsel, U.S. House of Representatives, 29 December 2022. Primary Regulation · link checked 2026-09-26
     Cited on: Devices & electronics
110. Directive (EU) 2022/2557 on the resilience of critical entities. Official Journal of the European Union, 14 December 2022. Primary Regulation · link checked 2026-09-26
     Cited on: Power & infrastructure
111. Regulation (EU) 2017/745 on medical devices (MDR), Annex I sections 17.2 and 17.4. Official Journal of the European Union / EUR-Lex, 5 April 2017. Primary Regulation · link checked 2026-09-26
     Cited on: Devices & electronics
112. PACS downtime drill: testing departmental workflow with an enterprise imaging viewer and archive. Pediatric Radiology 52(7):1234-1241, 30 March 2022. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Degradation tiers
113. Evacuation of a neonatal intensive care unit in a disaster: lessons from Hurricane Sandy. Pediatrics (American Academy of Pediatrics), 2014. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Degradation tiers, Superstorm Sandy: NYU Langone and Bellevue lose backup power and evacuate
114. Blackout in Spain: Urgent Analysis of Impact on Emergency Medical Services. Prehospital and Disaster Medicine, December 2025. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Power & infrastructure, Connectivity & data, Devices & electronics, Cascades, Iberian Peninsula blackout
115. Effectiveness of hospital staff mass-casualty incident training methods: a systematic literature review. Prehospital and Disaster Medicine 19(3):191-199, 2004. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Degradation tiers
116. Normal Accidents: Living with High-Risk Technologies (Updated Edition). Princeton University Press, 1999. Primary Book · link checked 2026-09-26
     Cited on: Cascades
117. Blackout of 2003: public health effects and emergency response. Public Health Reports, 2006. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Power & infrastructure, Cascades, Northeast blackout: New York City hospital generators fail
118. "Going solid": a model of system dynamics and consequences for patient safety. Quality and Safety in Health Care 14(2):130-134, 2005. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Cascades
119. Automation Bias in Mammography: The Impact of Artificial Intelligence BI-RADS Suggestions on Reader Performance. Radiology 307(4):e222176 (RSNA), 2 May 2023. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Models & agents, The human handoff, Wrong AI suggestions pull radiologists' mammogram ratings off
120. J3016_202104: Taxonomy and Definitions for Terms Related to Driving Automation Systems for On-Road Motor Vehicles. SAE International, 30 April 2021. Primary Standard · link checked 2026-09-26
     Cited on: Degradation tiers
121. Good and bad reasons: The Swiss cheese model and its critics. Safety Science 126:104660, 2020. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Cascades
122. Dissecting racial bias in an algorithm used to manage the health of populations. Science (Obermeyer Z, Powers B, Vogeli C, Mullainathan S), 25 October 2019. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Models & agents, Care-management algorithm under-referred Black patients because it predicted cost, not illness
123. February 2021 Winter Storm-Related Deaths – Texas. Texas Department of State Health Services, 31 December 2021. Primary Official report · link checked 2026-09-26
     Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Texas winter storm: record load shed, hospitals lose water and heat
124. Joint Commission Perspectives, July 2025 (Vol. 45, No. 7). The Joint Commission, 1 July 2025. Primary Guidance · link checked 2026-09-27
     Cited on: The human handoff
125. National Patient Safety Goals, Effective January 2025 for the Hospital Program. The Joint Commission, 30 October 2024. Primary Standard · link checked 2026-09-27
     Cited on: The human handoff
126. R3 Report Issue 5: Alarm system safety (NPSG.06.01.01). The Joint Commission, 11 December 2013. Primary Standard · link checked 2026-09-26
     Cited on: The human handoff
127. Reference Guide: Emergency Management Standards, effective July 1, 2022 (HAP & CAH). The Joint Commission, 2022. Primary Standard · link checked 2026-09-26
     Cited on: Degradation tiers
128. Sentinel Event Alert Issue 67: Preserving patient safety after a cyberattack. The Joint Commission, 15 August 2023. Primary Guidance · link checked 2026-09-26
     Cited on: Connectivity & data, The human handoff, Cascades, Degradation tiers, Ransomware spillover to adjacent San Diego emergency departments, Princeton Community Hospital Petya ransomware
129. Joint Commission and Coalition for Health AI (CHAI) Guidance on the Responsible Use of AI in Healthcare (RUAIH). The Joint Commission and Coalition for Health AI, 17 September 2025. Primary Guidance · link checked 2026-09-26
     Cited on: Models & agents
130. AI recognition of patient race in medical imaging: a modelling study. The Lancet Digital Health (Gichoya JW, Banerjee I, et al.), 11 May 2022. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Models & agents
131. Endoscopist deskilling risk after exposure to artificial intelligence in colonoscopy: a multicentre, observational study. The Lancet Gastroenterology & Hepatology 10(10):896-903, 12 August 2025. Primary Peer-reviewed · link checked 2026-09-26
     Cited on: Models & agents, The human handoff, Endoscopists detect fewer adenomas without AI after AI is introduced
132. 45 CFR 92.210 Nondiscrimination in the use of patient care decision support tools (Section 1557 rule). U.S. Department of Health and Human Services (eCFR), 6 May 2024. Primary Regulation · link checked 2026-09-26
     Cited on: Models & agents, Care-management algorithm under-referred Black patients because it predicted cost, not illness
133. Magellan Diagnostics Pleads Guilty to Criminal FDCA Charges. U.S. Department of Justice (District of Massachusetts), reposted by FDA OCI, 27 June 2024. Primary Official report · link checked 2026-09-26
     Cited on: Devices & electronics, LeadCare blood lead analyzers return falsely low results; malfunction concealed
134. About Manufacturer and User Facility Device Experience (MAUDE) Database. U.S. Food and Drug Administration, 8 December 2025. Primary Dataset · link checked 2026-09-26
     Cited on: Devices & electronics
135. Artificial Intelligence-Enabled Device Software Functions: Lifecycle Management and Marketing Submission Recommendations (draft guidance). U.S. Food and Drug Administration, 7 January 2025. Primary Guidance · link checked 2026-09-26
     Cited on: Models & agents
136. Artificial Intelligence-Enabled Medical Devices (list). U.S. Food and Drug Administration, 2026. Primary Dataset · link checked 2026-09-26
     Cited on: Models & agents
137. Clinical Decision Support Software: Guidance for Industry and FDA Staff. U.S. Food and Drug Administration, 29 January 2026. Primary Guidance · link checked 2026-09-26
     Cited on: The human handoff
138. Cybersecurity Vulnerabilities with Certain Patient Monitors from Contec and Epsimed: FDA Safety Communication. U.S. Food and Drug Administration, 30 January 2025. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, Devices & electronics, Contec CMS8000 patient monitors: hidden remote-access function disclosed by CISA and FDA
139. FDA Activities Related to Recalled Philips Ventilators, BiPAP Machines, and CPAP Machines. U.S. Food and Drug Administration, November 2024. Primary Official report · link checked 2026-09-26
     Cited on: Devices & electronics, Philips Respironics ventilator, BiPAP and CPAP recall over degrading sound-abatement foam
140. Federal Court Enters Consent Decree Against Philips Respironics Following Recall of Certain Sleep Therapy Machines. U.S. Food and Drug Administration, 9 April 2024. Primary Official report · link checked 2026-09-26
     Cited on: Devices & electronics, Philips Respironics ventilator, BiPAP and CPAP recall over degrading sound-abatement foam
141. Glucose Monitor Sensor Recall: Abbott Diabetes Care Removes Certain FreeStyle Libre 3 and FreeStyle Libre 3 Plus Sensors. U.S. Food and Drug Administration, 5 February 2026. Primary Official report · link checked 2026-09-26
     Cited on: Devices & electronics, FreeStyle Libre 3 sensors report falsely low glucose
142. Infusion Pump Software Correction: BD Issues Correction for BD Alaris Systems Manager and Care Coordination Engine Infusion Adapter Software Due to Risk for Outdated Automated Programming Requests to Load. U.S. Food and Drug Administration, 18 February 2025. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, Devices & electronics, The human handoff, Alaris infusion interoperability backlog can load outdated pump orders
143. Marketing Submission Recommendations for a Predetermined Change Control Plan for Artificial Intelligence-Enabled Device Software Functions (final guidance). U.S. Food and Drug Administration, 4 December 2024. Primary Guidance · link checked 2026-09-26
     Cited on: Models & agents
144. Medical Device Recalls database. U.S. Food and Drug Administration, November 2002. Primary Dataset · link checked 2026-09-26
     Cited on: Devices & electronics
145. Postmarket Management of Cybersecurity in Medical Devices. U.S. Food and Drug Administration, December 2016. Primary Guidance · link checked 2026-09-26
     Cited on: Devices & electronics
146. Problems Reported with Recalled Philips Ventilators, BiPAP Machines, and CPAP Machines. U.S. Food and Drug Administration, 31 January 2024. Primary Dataset · link checked 2026-09-26
     Cited on: Devices & electronics, Philips Respironics ventilator, BiPAP and CPAP recall over degrading sound-abatement foam
147. Pulse Oximeters (FDA actions on accuracy and skin pigmentation). U.S. Food and Drug Administration, 6 January 2025. Primary Guidance · link checked 2026-09-26
     Cited on: Devices & electronics, Models & agents, Pulse oximeters overestimate oxygen saturation in patients with darker skin
148. Pulse Oximeters for Medical Purposes - Non-Clinical and Clinical Performance Testing, Labeling, and Premarket Submission Recommendations (Draft Guidance). U.S. Food and Drug Administration, 7 January 2025. Primary Guidance · link checked 2026-09-26
     Cited on: Devices & electronics, Models & agents, Pulse oximeters overestimate oxygen saturation in patients with darker skin
149. Recalls, Corrections and Removals (Devices). U.S. Food and Drug Administration, 2020. Primary Regulation · link checked 2026-09-26
     Cited on: Devices & electronics
150. Ventilator Software Correction: Philips Respironics Issues Mandatory Software Correction and Updates Use Instructions for Trilogy Evo, EV300, EvoO2, and Evo Universal. U.S. Food and Drug Administration, 16 July 2024. Primary Official report · link checked 2026-09-26
     Cited on: Devices & electronics, Philips Respironics ventilator, BiPAP and CPAP recall over degrading sound-abatement foam
151. Draft Guidance - Select Updates for the Premarket Cybersecurity Guidance: Section 524B of the FD&C Act (webinar slides). U.S. Food and Drug Administration (CDRH), 30 April 2024. Primary Guidance · link checked 2026-09-26
     Cited on: Devices & electronics
152. Cybersecurity in Medical Devices: Quality Management System Considerations and Content of Premarket Submissions. U.S. Food and Drug Administration (CDRH/CBER), February 2026. Primary Guidance · link checked 2026-09-26
     Cited on: Devices & electronics
153. BD Provides Update on Feb. 4, 2020 Voluntary Recall of the BD Alaris System PC Units and Modules. U.S. Food and Drug Administration (company announcement), 9 March 2020. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, Devices & electronics, The human handoff, Alaris infusion interoperability backlog can load outdated pump orders
154. Recognized Consensus Standard 5-125: ISO 14971:2019 Medical devices - Application of risk management to medical devices. U.S. Food and Drug Administration (Recognized Consensus Standards database), 23 December 2019. Primary Standard · link checked 2026-09-26
     Cited on: Devices & electronics
155. Testimony of Adam Meyers, CrowdStrike, before the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection: 'An Outage Strikes'. U.S. House Committee on Homeland Security, 24 September 2024. Primary Testimony / filing · link checked 2026-09-26
     Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
156. A Failure of Initiative (H. Rpt. 109-377), Medical Care chapter. U.S. House Select Bipartisan Committee on Hurricane Katrina (mirror: LSU Law biotech.law.lsu.edu), 15 February 2006. Primary Official report · link checked 2026-09-27
     Cited on: Power & infrastructure, The human handoff, Cascades, Hurricane Katrina: Memorial Medical Center loses all power
157. Refusal of Recovery: How Medicare Advantage Insurers Have Denied Patients Access to Post-Acute Care. U.S. Senate Permanent Subcommittee on Investigations (Majority Staff), 17 October 2024. Primary Official report · link checked 2026-09-26
     Cited on: Models & agents, The human handoff, Post-acute care denials rose as UnitedHealthcare automated prior authorization; lawsuit targets nH Predict
158. Cyber Security and Resilience (Network and Information Systems) Bill factsheet: Designating critical suppliers. UK Government (GOV.UK), 30 June 2026. Primary Guidance · link checked 2026-09-26
     Cited on: Connectivity & data, The human handoff, Cascades, Synnovis pathology ransomware, South-East London
159. Universal Health Services Form 10-K for fiscal year 2020. Universal Health Services, Inc. / SEC EDGAR, 2021. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, Cascades, Universal Health Services enterprise-wide IT shutdown
160. Universal Health Services Form 8-K (information technology security incident). Universal Health Services, Inc. / SEC EDGAR, 29 September 2020. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, Cascades, Universal Health Services enterprise-wide IT shutdown
161. Hospital Emergency Preparedness and Response During Superstorm Sandy (OEI-06-13-00260). US HHS Office of Inspector General, 16 September 2014. Primary Official report · link checked 2026-09-26
     Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Superstorm Sandy: NYU Langone and Bellevue lose backup power and evacuate
162. Testimony of Andrew Witty, CEO, UnitedHealth Group, before the Senate Finance Committee: 'Hacking America's Health Care: Assessing the Change Healthcare Cyber Attack and What's Next'. US Senate Committee on Finance, 1 May 2024. Primary Testimony / filing · link checked 2026-09-26
     Cited on: Connectivity & data, The human handoff, Cascades, Change Healthcare ransomware and national claims/pharmacy clearinghouse outage
163. The New Electronic Health Record's Unknown Queue Caused Multiple Events of Patient Harm (Report 22-01137-204). VA Office of Inspector General, 14 July 2022. Primary Official report · link checked 2026-09-26
     Cited on: Connectivity & data, The human handoff, VA Oracle Cerner EHR 'unknown queue' silently dropped clinical orders
164. Ethics and governance of artificial intelligence for health: Guidance on large multi-modal models (news release). World Health Organization, 18 January 2024. Primary Guidance · link checked 2026-09-26
     Cited on: Models & agents

Secondary sources (45)

1. Texas' power outages, water shortages put bigger strain on hospitals. ABC News, 18 February 2021. Secondary Journalism · link checked 2026-09-26
   Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Texas winter storm: record load shed, hospitals lose water and heat
2. AHA Survey: Change Healthcare Cyberattack Significantly Disrupts Patient Care, Hospitals' Finances. American Hospital Association, 15 March 2024. Secondary Journalism · link checked 2026-09-26
   Cited on: Connectivity & data, The human handoff, Cascades, Change Healthcare ransomware and national claims/pharmacy clearinghouse outage
3. Change Healthcare Cyberattack Underscores Urgent Need to Strengthen Cyber Preparedness for Individual Health Care Organizations and as a Field. American Hospital Association, 2025. Secondary Official report · link checked 2026-09-26
   Cited on: Connectivity & data, The human handoff, Cascades, Change Healthcare ransomware and national claims/pharmacy clearinghouse outage
4. Researchers say an AI-powered transcription tool used in hospitals invents things no one ever said. Associated Press (syndicated via Scripps News), 26 October 2024. Secondary Journalism · link checked 2026-09-26
   Cited on: Models & agents, The human handoff, Whisper-based medical transcription invents text, and the audio is deleted
5. As AI reshapes patient care, human nurses are pushing back against its creeping influence (AP). Associated Press via Euronews, 18 March 2025. Secondary Journalism · link checked 2026-09-26
   Cited on: Models & agents, The human handoff, Sepsis alert nearly led to fluid loading of a dialysis patient
6. AWS outage disrupts Tufts Medicine; other health systems unaffected. Becker's Hospital Review (Naomi Diaz), 21 October 2025. Secondary Journalism · link checked 2026-09-26
   Cited on: Power & infrastructure, Connectivity & data, Cascades, AWS us-east-1 DynamoDB DNS failure disrupts cloud-hosted clinical systems
7. NHS Ransomware Hack Caused Patient Harm in UK, Data Shows. Bloomberg News (Ryan Gallagher), 14 January 2025. Secondary Journalism · link checked 2026-09-26
   Cited on: Connectivity & data, The human handoff, Cascades, Synnovis pathology ransomware, South-East London
8. Cyber attack prompts Princeton Community Hospital to rebuild network. Bluefield Daily Telegraph (Blake Stowers), 29 June 2017. Secondary Journalism · link checked 2026-09-27
   Cited on: Connectivity & data, The human handoff, Princeton Community Hospital Petya ransomware
9. UnitedHealth uses faulty AI to deny elderly patients medically necessary coverage, lawsuit claims. CBS News, 20 November 2023. Secondary Journalism · link checked 2026-09-26
   Cited on: Models & agents, The human handoff, Post-acute care denials rose as UnitedHealthcare automated prior authorization; lawsuit targets nH Predict
10. What caused generators to fail at NYC hospitals?. CBS News / Associated Press, 2 November 2012. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Superstorm Sandy: NYU Langone and Bellevue lose backup power and evacuate
11. All Systems Down. CIO / Computerworld (Scott Berinato), 25 February 2003. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Beth Israel Deaconess network collapse
12. Halamka on Beth Israel's Health-Care IT Disaster. CIO Magazine (Scott Berinato), 15 February 2003. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Beth Israel Deaconess network collapse
13. Boil-Water Advisory in Effect, Low Water Pressure Impacts Austin Hospitals. Circle of Blue, 18 February 2021. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Texas winter storm: record load shed, hospitals lose water and heat
14. Federal judge trims AI denial lawsuit against UnitedHealth Group. Courthouse News Service, 13 February 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Post-acute care denials rose as UnitedHealthcare automated prior authorization; lawsuit targets nH Predict
15. AWS outage causes disruption to patient care across NHS sites. Digital Health News (Jordan Sollof), 21 October 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Cascades, AWS us-east-1 DynamoDB DNS failure disrupts cloud-hosted clinical systems
16. Top 10 Health Technology Hazards for 2026: Executive Brief. ECRI, January 2026. Secondary Official report · link checked 2026-09-26
    Cited on: Devices & electronics, The human handoff, FreeStyle Libre 3 sensors report falsely low glucose
17. La resaca en los hospitales tras salvar el apagón: 'Más allá de cierto caos, hemos sobrevivido bastante bien'. elDiario.es (Sofía Pérez Mendoza), 29 April 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, Connectivity & data, Devices & electronics, Cascades, Iberian Peninsula blackout
18. AI systems used by Ontario doctors hallucinate, auditor general finds. Global News (Canada), 12 May 2026. Secondary Journalism · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Ontario auditor: all 20 approved AI scribes produced inaccurate notes in testing
19. Complying with inspection, testing and maintenance for electrical systems. Health Facilities Management (American Society for Health Care Engineering), 10 June 2022. Secondary Guidance · link checked 2026-09-26
    Cited on: Power & infrastructure
20. Operational Continuity - Cyber Incident (OCCI) Checklist, Version 1.1. Health Sector Coordinating Council Cybersecurity Working Group, May 2022. Secondary Guidance · link checked 2026-09-26
    Cited on: Degradation tiers
21. A look at how Mass General Brigham recovered from the CrowdStrike outage. Healthcare Brew (Cassie McGrath), 11 September 2024. Secondary Journalism · link checked 2026-09-27
    Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
22. The state-by-state impact of Ascension's cyberattack. Healthcare Dive, 2024. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Ascension ransomware and multi-week EHR downtime
23. UnitedHealth hikes number of Change cyberattack breach victims to 190 million. Healthcare Dive (Emily Olsen), 27 January 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Change Healthcare ransomware and national claims/pharmacy clearinghouse outage
24. Cyberattack led to harrowing lapses at Ascension hospitals, clinicians say. KFF Health News (Rachana Pradhan) and Michigan Public (Kate Wells); co-published by NPR, 20 June 2024. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Ascension ransomware and multi-week EHR downtime
25. MITRE ATLAS (Adversarial Threat Landscape for AI Systems), data v5.6.0. MITRE, 2026. Secondary Standard · link checked 2026-09-26
    Cited on: Models & agents
26. 4 Former Staffers Face Charges Over Nursing Home Deaths After Hurricane Irma. NPR, 26 August 2019. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, Cascades, Hurricane Irma: nursing home loses air conditioning while power stays on
27. OWASP Top 10 for Agentic Applications. OWASP GenAI Security Project, 9 December 2025. Secondary Standard · link checked 2026-09-26
    Cited on: Models & agents, Coding agent deleted a production database during a code freeze, then misreported recovery (non-clinical analogue)
28. OWASP Top 10 for LLM Applications 2025. OWASP GenAI Security Project, 2025. Secondary Standard · link checked 2026-09-26
    Cited on: Models & agents
29. The Deadly Choices at Memorial. ProPublica / The New York Times Magazine (Sheri Fink), 27 August 2009. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, The human handoff, Cascades, Hurricane Katrina: Memorial Medical Center loses all power
30. How Complex Systems Fail. Richard I. Cook, Cognitive Technologies Laboratory, University of Chicago, 1998. Secondary Book · link checked 2026-09-26
    Cited on: The human handoff
31. AI enters the exam room, and nurses are left to manage the fallout. Scientific American (Hilke Schellmann), 17 February 2026. Secondary Journalism · link checked 2026-09-27
    Cited on: Models & agents, The human handoff, Sepsis alert nearly led to fluid loading of a dialysis patient
32. Microsoft global outage forces hospitals to cancel appointments. STAT (Palmer K, Trang B, Ross C), 19 July 2024. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
33. MGH death spurs review of patient monitors. The Boston Globe (Liz Kowalczyk), 21 February 2010. Secondary Journalism · link checked 2026-09-27
    Cited on: Devices & electronics, The human handoff, Patient dies while a heart monitor's crisis alarm is switched off
34. Patient alarms often unheard, unheeded. The Boston Globe (Liz Kowalczyk), 13 February 2011. Secondary Journalism · link checked 2026-09-27
    Cited on: Devices & electronics, The human handoff, Patient dies while a heart monitor's crisis alarm is switched off
35. National Performance Goals Effective January 2026 for the Hospital Program. The Joint Commission, 1 January 2026. Secondary Standard · link checked 2026-09-26
    Cited on: Devices & electronics, The human handoff
36. Sentinel Event Alert Issue 50: Medical device alarm safety in hospitals. The Joint Commission, 8 April 2013. Secondary Official report · link checked 2026-09-26
    Cited on: Devices & electronics, The human handoff, ICU patient dies after alarms go unanswered for an hour
37. Ransomware attack continues to disrupt healthcare in London nearly two years later. The Record (Recorded Future News), 2026. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Synnovis pathology ransomware, South-East London
38. Ransomware attack contributed to patient's death, says Britain's NHS. The Record by Recorded Future News (Alexander Martin), 25 June 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Synnovis pathology ransomware, South-East London
39. Qilin ransomware attack on NHS supplier contributed to patient fatality. The Register, 26 June 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Connectivity & data, The human handoff, Cascades, Synnovis pathology ransomware, South-East London
40. Vibe coding service Replit deleted user's production database, faked data, told fibs galore. The Register, 21 July 2025. Secondary Journalism · link checked 2026-09-26
    Cited on: Models & agents, Coding agent deleted a production database during a code freeze, then misreported recovery (non-clinical analogue)
41. Austin hospitals lose water pressure and heat amid winter storm. The Texas Tribune, 17 February 2021. Secondary Journalism · link checked 2026-09-26
    Cited on: Power & infrastructure, Devices & electronics, The human handoff, Cascades, Texas winter storm: record load shed, hospitals lose water and heat
42. Hospitals in Hurricane Katrina: Challenges Facing Custodial Institutions in a Disaster. The Urban Institute (Bradford H. Gray, Kathy Hebert), 1 July 2006. Secondary Official report · link checked 2026-09-27
    Cited on: Power & infrastructure, The human handoff, Cascades, Hurricane Katrina: Memorial Medical Center loses all power
43. A pharmacy chain in Vermont implemented AI for efficiency. It's led to delays, incorrect information and privacy concerns. VTDigger, 29 July 2026. Secondary Journalism · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Pharmacy AI phone agent garbled drug names and placed wrong and duplicate refills
44. Kinney Drugs pulls back AI phone assistant after hundreds of customer complaints. WCAX-TV, 7 August 2026. Secondary Journalism · link checked 2026-09-26
    Cited on: Models & agents, The human handoff, Pharmacy AI phone agent garbled drug names and placed wrong and duplicate refills
45. Princeton hospital to replace 12-hundred computer hard drives after cyber attack. WV MetroNews (Carrie Hodousek), 30 June 2017. Secondary Journalism · link checked 2026-09-27
    Cited on: Connectivity & data, The human handoff, Princeton Community Hospital Petya ransomware

Supporting sources (7)

1. Why Do Multi-Agent LLM Systems Fail?. arXiv preprint 2503.13657 (Cemri M, Pan MZ, Yang S, et al.), 17 March 2025. Supporting Preprint · link checked 2026-09-26
   Cited on: Models & agents
2. Do the CONTEC CMS8000 Patient Monitors Contain a Chinese Backdoor? The Reality is More Complicated…. Claroty Team82, 2 February 2025. Supporting Vendor research · link checked 2026-09-27
   Cited on: Connectivity & data, Devices & electronics, Contec CMS8000 patient monitors: hidden remote-access function disclosed by CISA and FDA
3. External Technical Root Cause Analysis - Channel File 291. CrowdStrike, 6 August 2024. Supporting Official report · link checked 2026-09-26
   Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
4. Contec Patient Vital Signs Monitor: Chinese Backdoor or Bad Design?. Cylera (Chad Waters, Apostolos Bakoyiannis), 4 February 2025. Supporting Vendor research · link checked 2026-09-27
   Cited on: Connectivity & data, Devices & electronics, Contec CMS8000 patient monitors: hidden remote-access function disclosed by CISA and FDA
5. EU AI Act Explorer: Article 14 (Human Oversight) and Article 26 (Obligations of Deployers). Future of Life Institute (artificialintelligenceact.eu), 2024. Supporting Regulation · link checked 2026-09-26
   Cited on: The human handoff
6. Helping our customers through the CrowdStrike outage. Microsoft (David Weston), 20 July 2024. Supporting Official report · link checked 2026-09-26
   Cited on: Connectivity & data, Devices & electronics, The human handoff, Cascades, CrowdStrike Falcon content update crashes Windows hosts, including hospital systems
7. Synnovis cyber update. Synnovis, 2025. Supporting Official report · link checked 2026-09-26
   Cited on: Connectivity & data, The human handoff, Cascades, Degradation tiers, Synnovis pathology ransomware, South-East London

Information only, not advice. FailSystems is an aggregation and synthesis of published sources. It is not consulting, engineering, legal, regulatory or medical advice, and using it creates no professional relationship. Health systems are complex and no approach fits every organisation: anything you adopt is your own decision, at your own risk, and should be checked against the current official sources and by qualified people who know your setting. Full disclaimer.