Connect with us

International

Behind the stalkerware network spilling the private phone data of hundreds of thousands

It’s not just one spyware app exposing people’s phone data, but an entire fleet of Android spyware apps that share the same security vulnerability.

Published

on

Much of the spyware you hear of today are the powerful nation-state backed exploits that can quietly and remotely hack into iPhones anywhere in the world. These powerful hacking tools are bought and operated by governments, often targeting their most vocal critics — journalists, activists and human rights defenders.

There is another kind of spyware that is more prevalent and much more likely to affect the average person: the consumer-grade spyware apps that are controlled by everyday people.

Consumer-grade spyware is often sold under the guise of child monitoring software, but also goes by the term “stalkerware” for its ability to track and monitor people or spouses without their consent. Stalkerware apps are installed surreptitiously by someone with physical access to a person’s phone and are hidden from home screens, but will silently and continually upload call records, text messages, photos, browsing history, precise location data, and call recordings from the phone without the owner’s knowledge. Many of these spyware apps are built for Android, since it’s easier to plant a malicious app than on iPhones, which have tighter restrictions on what kind of apps can be installed and what data can be accessed.

Last October, TechCrunch revealed a consumer-grade spyware security issue that’s putting the private phone data, messages and locations of hundreds of thousands of people, including Americans, at risk.

But in this case it’s not just one spyware app exposing people’s phone data. It’s an entire fleet of Android spyware apps that share the same security vulnerability.

TechCrunch first discovered the vulnerability as part of a wider exploration of consumer-grade spyware. The vulnerability is simple, which is what makes it so damaging, allowing near-unfettered remote access to a device’s data. But efforts to privately disclose the security flaw to prevent it from being misused by nefarious actors has been met with silence both from those behind the operation and from Codero, the web company that hosts the spyware operation’s back-end server infrastructure.

The nature of spyware means those targeted likely have no idea that their phone is compromised. With no expectation that the vulnerability will be fixed any time soon, TechCrunch is now revealing more about the spyware apps and the operation so that owners of compromised devices can uninstall the spyware themselves, if it’s safe to do so.

Given the complexities in notifying victims, CERT/CC, the vulnerability disclosure center at Carnegie Mellon University’s Software Engineering Institute, has also published a note about the spyware.

What follows are the findings of a months-long investigation into a massive stalkerware operation that is harvesting the data from some 400,000 phones around the world, with the number of victims growing daily, including in the United States, Brazil, Indonesia, India, Jamaica, the Philippines, South Africa and Russia.

On the front line of the operation is a collection of white label Android spyware apps that continuously collect the contents of a person’s phone, each with custom branding, and fronted by identical websites with U.S. corporate personas that offer cover by obfuscating links to its true operator. Behind the apps is a server infrastructure controlled by the operator, which is known to TechCrunch as a Vietnam-based company called 1Byte.

The user interface for planting the spyware. Image Credits: TechCrunch

TechCrunch found nine nearly-identical spyware apps that presented with distinctly different branding, some with more obscure names than others: Copy9, MxSpy, TheTruthSpy, iSpyoo, SecondClone, TheSpyApp, ExactSpy, FoneTracker, and GuestSpy.

Other than their names, the spyware apps have practically identical features under the hood, and even the same user interface for setting up the spyware. Once installed, each app allows the person who planted the spyware access to a web dashboard for viewing the victim’s phone data in real-time — their messages, contacts, location, photos, and more. Much like the apps, each dashboard is a clone of the same web software. And, when TechCrunch analyzed the apps’ network traffic, we found the apps all contact the same server infrastructure.

But because the nine apps share the same code, web dashboards, and the same infrastructure, they also share the same vulnerability.

The vulnerability in question is known as an insecure direct object reference, or IDOR, a class of bug that exposes files or data on a server because of sub-par, or no security controls in place. It’s similar to needing a key to unlock your mailbox, but that key can also unlock every other mailbox in your neighborhood. IDORs are one of the most common kinds of vulnerability; TechCrunch has found and privately disclosed similar flaws before, such as when LabCorp exposed thousands of lab test results, and the recent case of CDC-approved health app Docket exposing COVID-19 digital vaccine records. IDORs have an advantage in that they can often be fixed at the server level without needing to roll out a software update to an app, or in this case a fleet of apps.

But shoddy coding didn’t just expose the private phone data of ordinary people. The entire spyware infrastructure is riddled with bugs that reveal more details about the operation itself. It’s how we came to learn that data on some 400,000 devices — though perhaps more — have been compromised by the operation. Shoddy coding also led to the exposure of personal information about its affiliates who bring in new paying customers, information that they presumably expected to be private; even the operators themselves.

A web of companies that don’t seem to exist

Behind each branded app, web dashboard and front-facing website is what appears to be a fictitious parent company with its own corporate website. The parent company websites are visually identical and all claim to be “software outsourcing” companies with over a decade of experience and hundreds of engineers, with each website claiming one of the nine branded apps as their flagship product.

If the identical websites weren’t an immediate red flag, the parent company websites are all hosted on the same web server. TechCrunch also searched state and public databases but found no current business records exist for any of the purported parent companies.

One of the many parent companies is Jexpa. Like the rest of the parent companies, Jexpa does not appear to exist on paper, but for a time an entity by that name did. Jexpa was registered as a technology company in California in 2003, but was suspended from the state’s business registry in 2009. The company’s domain was abandoned and left to expire.

Jexpa’s expired domain was purchased by an undisclosed buyer in 2015. (TechCrunch has found no evidence of any connection between the former Jexpa and the 2015 purchaser of Jexpa.com.) Jexpa.com now purports to be the site of a software outsourcing company, but is packed with stock photos and dummy pages and uses the likeness of several real-world identities, like “Leo DiCaprio,” but using the photo of Brazilian director Fernando Meirelles. The operators have gone to considerable lengths to conceal their true involvement in the operation, including registering email addresses using the identities of other people — in one case using the name and photo of a NYPD deputy commissioner and a former shipping executive in another.

A chart displaying nine spyware apps, each nested under a corporate persona, all of which flow up to 1Byte.

The structure of the spyware apps and company personas set up by 1Byte. Image Credits: TechCrunch

But Jexpa runs deeper than just a name. TechCrunch found several overlaps between Jexpa and the branded spyware apps, including a set of release notes that was likely not meant to be public but had been left behind — and exposed — on its servers.

The release notes contain about three years of detailed changes and fixes to the back-end web dashboards, describing how the spyware has evolved since the log was first created in late-2018, with its most recent fixes deployed in April 2021. The notes were signed by a developer with a Jexpa.com email address.

The notes also describe fixes to what the developers call the Jexpa Framework, the software stack running on its servers that it uses to host the operation, each brand’s web dashboard, and the storage for the massive amounts of phone data collected from the spyware apps themselves. We know this because, just as they had done with the release notes, the developers also left their technical documentation and the source code for the Jexpa Framework exposed to the internet.

The documentation laid out specific technical configurations and detailed instructions, with poorly-redacted screenshots that revealed portions of several domains and subdomains used by the spyware apps. Those same screenshots also exposed the operator’s own website, but more on that in a moment. The documentation pages also used examples of the spyware apps themselves, like SecondClone, and meticulously describe how to set up new content storage servers for each app from scratch, even down to which web host to use — such as Codero, Hostwinds, and Alibaba — because they allow for a particular disk storage setup required for the apps to work.

For a company with no apparent business filings, the operator put considerable effort into making Jexpa look like the top of the operation. But the operator left behind a trail of internet records, exposed source code and documentation that connects Jexpa, the Jexpa Framework, and the fleet of spyware apps to a Vietnam-based company called 1Byte.

A short time after we contacted 1Byte about the vulnerability and its links to Jexpa, the Jexpa Framework’s documentation pages were put behind a password wall, shutting us out.

From London to Vietnam

1Byte looks like any other software startup, a small team of Android and .NET developers living and working just outside of Vietnam’s capital Ho Chi Minh City. Its Facebook page shows the group at team outings, dinners, and enjoying the rewards of their work. But 1Byte is the same group of developers behind this enormous spyware operation that facilitates the surveillance of hundreds of thousands of people around the world.

The layers that they built to distance themselves from the operation suggests the group may be aware of the legal, or at least the reputational risks associated with running an operation of this kind.

It’s not only 1Byte that’s apparently keen to keep its involvement a secret. The affiliates, who help to sell the software, also made efforts to conceal their identities.

1Byte set up another company called Affiligate, which handles the payments for new customers buying the spyware and also gets the affiliates paid. Affiligate was set up under the guise of allowing app developers to sell their software, but in reality it is a small marketplace that sells mostly spyware. But shoddy coding seems to follow 1Byte wherever it goes. A bug in Affiligate’s marketplace is leaking the real identities of affiliates in the browser every time the page loads.

Affiligate presents itself as a company based either in the U.K. or France, depending on where on its website you look. It even lists 1Byte as its Singapore office, though TechCrunch has found no evidence that 1Byte has any physical presence in Singapore. Public records show a U.K. company was incorporated under the name Affiligate in 2019 to Daniel Knights and later struck-off by the U.K. registrar in March 2021. Efforts by TechCrunch to locate and reach Daniel Knights were unsuccessful.

Only one other name shows up in Affiligate’s paperwork. The U.K. registrar records showed Affiligate’s only shareholder is Van Thieu, whose address on the paperwork puts him at a virtual office space in London. Thieu’s profile on LinkedIn lists him as a 1Byte shareholder in Vietnam, and in his profile photo he can be seen wearing a T-shirt with the 1Byte logo. Thieu is also the director of 1Byte, and is believed to be the head of the spyware operation. Though he is not listed on its website, Thieu is seen in several team photos on the group’s Facebook page. TechCrunch has identified two other 1Byte employees through the Affiligate bug, and another employee who left their name in the Jexpa Framework’s code.

TechCrunch emailed 1Byte with details of the security vulnerability. The emails were opened, according to our email open tracker, but we did not get a reply. We followed up with 1Byte using the email address we had previously messaged, but the email bounced and was returned with an error message stating that the email address no longer exists. Emails sent directly to 1Byte employees were delivered but we did not receive any replies.

Since contacting 1Byte and known affiliates, at least two of the branded spyware apps appeared to cease working or shut down.

READ MORE ON TECHCRUNCH

That leaves us here. Without a fix, or intervention from the web host, TechCrunch cannot disclose more about the security vulnerability — even if it’s the result of bad actors themselves — because of the risk it poses to the hundreds of thousands of people whose phones have been unknowingly compromised by this spyware.

We have put together an explainer on how to remove the spyware from your phone, if you believe it is safe to do so. Because spyware is covert-by-design, keep in mind that removing the spyware will likely alert the person who planted it, which could create an unsafe situation. You can find support and resources on how to create a safety plan from the Coalition Against Stalkerware and the National Network to End Domestic Violence.

Despite the growing threat posed by consumer-grade spyware in recent years, U.S. authorities have been hamstrung by legal and technical challenges in their efforts to tackle spyware operations.

Stalkerware still operates in a gray space in the United States, since the possession of spyware itself is not illegal. Federal prosecutors have in rare cases taken action against those who illegally plant spyware used for the sole purpose of surreptitiously intercepting a person’s communications in violation of federal wiretapping laws. But the government’s enforcement powers against operators are limited at best, and overseas spyware operators find themselves largely out of the jurisdictional reach of U.S. law enforcement.

Instead, much of the front-line effort against stalkerware has been fought by antivirus makers and cybersecurity companies working together with human rights defenders at the technical level. The Coalition Against Stalkerware launched in 2019 and works to support victims and survivors of stalkerware. The coalition shares resources and samples of known stalkerware so information about new threats can be given to other cybersecurity companies and automatically blocked.

In 2020, Google banned stalkerware apps on the Google Play store, and later blocked stalkerware apps from advertising in its search results, albeit with mixed results.

Where laws have been largely ineffective at curbing spyware, federal authorities have sometimes used novel legal approaches to justify taking civil action against operators, like for failing to adequately protect the vast amounts of phone data that they collect, often by citing U.S. consumer protection and data breach laws. Last year, the Federal Trade Commission banned SpyFone from the surveillance industry in the first order of its kind after its “lack of basic security” led to the public exposure of data on more than 2,000 phones. In 2019, the FTC settled with Retina-X after it was hacked several times, and eventually shut down.

Stalkerware at large is no stranger to security problems. mSpy, Mobistealth, Flexispy, Family Orbit, KidsGuard, and pcTattleTale have all made headlines in recent years for spilling, exposing, or falling victim to hackers who access vast troves of phone data.

Now an entire fleet of stalkerware apps can be added to the pile.


If you or someone you know needs help, the National Domestic Violence Hotline (1-800-799-7233) provides 24/7 free, confidential support to victims of domestic abuse and violence. If you are in an emergency situation, call 911. The Coalition Against Stalkerware also has resources if you think your phone has been compromised by spyware. You can contact this reporter on Signal and WhatsApp at +1 646-755-8849 or zack.whittaker@techcrunch.com by email. 

Read More

Continue Reading

International

Copper Soars, Iron Ore Tumbles As Goldman Says “Copper’s Time Is Now”

Copper Soars, Iron Ore Tumbles As Goldman Says "Copper’s Time Is Now"

After languishing for the past two years in a tight range despite recurring…

Published

on

Copper Soars, Iron Ore Tumbles As Goldman Says "Copper's Time Is Now"

After languishing for the past two years in a tight range despite recurring speculation about declining global supply, copper has finally broken out, surging to the highest price in the past year, just shy of $9,000 a ton as supply cuts hit the market; At the same time the price of the world's "other" most important mined commodity has diverged, as iron ore has tumbled amid growing demand headwinds out of China's comatose housing sector where not even ghost cities are being built any more.

Copper surged almost 5% this week, ending a months-long spell of inertia, as investors focused on risks to supply at various global mines and smelters. As Bloomberg adds, traders also warmed to the idea that the worst of a global downturn is in the past, particularly for metals like copper that are increasingly used in electric vehicles and renewables.

Yet the commodity crash of recent years is hardly over, as signs of the headwinds in traditional industrial sectors are still all too obvious in the iron ore market, where futures fell below $100 a ton for the first time in seven months on Friday as investors bet that China’s years-long property crisis will run through 2024, keeping a lid on demand.

Indeed, while the mood surrounding copper has turned almost euphoric, sentiment on iron ore has soured since the conclusion of the latest National People’s Congress in Beijing, where the CCP set a 5% goal for economic growth, but offered few new measures that would boost infrastructure or other construction-intensive sectors.

As a result, the main steelmaking ingredient has shed more than 30% since early January as hopes of a meaningful revival in construction activity faded. Loss-making steel mills are buying less ore, and stockpiles are piling up at Chinese ports. The latest drop will embolden those who believe that the effects of President Xi Jinping’s property crackdown still have significant room to run, and that last year’s rally in iron ore may have been a false dawn.

Meanwhile, as Bloomberg notes, on Friday there were fresh signs that weakness in China’s industrial economy is hitting the copper market too, with stockpiles tracked by the Shanghai Futures Exchange surging to the highest level since the early days of the pandemic. The hope is that headwinds in traditional industrial areas will be offset by an ongoing surge in usage in electric vehicles and renewables.

And while industrial conditions in Europe and the US also look soft, there’s growing optimism about copper usage in India, where rising investment has helped fuel blowout growth rates of more than 8% — making it the fastest-growing major economy.

In any case, with the demand side of the equation still questionable, the main catalyst behind copper’s powerful rally is an unexpected tightening in global mine supplies, driven mainly by last year’s closure of a giant mine in Panama (discussed here), but there are also growing worries about output in Zambia, which is facing an El Niño-induced power crisis.

On Wednesday, copper prices jumped on huge volumes after smelters in China held a crisis meeting on how to cope with a sharp drop in processing fees following disruptions to supplies of mined ore. The group stopped short of coordinated production cuts, but pledged to re-arrange maintenance work, reduce runs and delay the startup of new projects. In the coming weeks investors will be watching Shanghai exchange inventories closely to gauge both the strength of demand and the extent of any capacity curtailments.

“The increase in SHFE stockpiles has been bigger than we’d anticipated, but we expect to see them coming down over the next few weeks,” Colin Hamilton, managing director for commodities research at BMO Capital Markets, said by phone. “If the pace of the inventory builds doesn’t start to slow, investors will start to question whether smelters are actually cutting and whether the impact of weak construction activity is starting to weigh more heavily on the market.”

* * *

Few have been as happy with the recent surge in copper prices as Goldman's commodity team, where copper has long been a preferred trade (even if it may have cost the former team head Jeff Currie his job due to his unbridled enthusiasm for copper in the past two years which saw many hedge fund clients suffer major losses).

As Goldman's Nicholas Snowdon writes in a note titled "Copper's time is now" (available to pro subscribers in the usual place)...

... there has been a "turn in the industrial cycle." Specifically according to the Goldman analyst, after a prolonged downturn, "incremental evidence now points to a bottoming out in the industrial cycle, with the global manufacturing PMI in expansion for the first time since September 2022." As a result, Goldman now expects copper to rise to $10,000/t by year-end and then $12,000/t by end of Q1-25.’

Here are the details:

Previous inflexions in global manufacturing cycles have been associated with subsequent sustained industrial metals upside, with copper and aluminium rising on average 25% and 9% over the next 12 months. Whilst seasonal surpluses have so far limited a tightening alignment at a micro level, we expect deficit inflexions to play out from quarter end, particularly for metals with severe supply binds. Supplemented by the influence of anticipated Fed easing ahead in a non-recessionary growth setting, another historically positive performance factor for metals, this should support further upside ahead with copper the headline act in this regard.

Goldman then turns to what it calls China's "green policy put":

Much of the recent focus on the “Two Sessions” event centred on the lack of significant broad stimulus, and in particular the limited property support. In our view it would be wrong – just as in 2022 and 2023 – to assume that this will result in weak onshore metals demand. Beijing’s emphasis on rapid growth in the metals intensive green economy, as an offset to property declines, continues to act as a policy put for green metals demand. After last year’s strong trends, evidence year-to-date is again supportive with aluminium and copper apparent demand rising 17% and 12% y/y respectively. Moreover, the potential for a ‘cash for clunkers’ initiative could provide meaningful right tail risk to that healthy demand base case. Yet there are also clear metal losers in this divergent policy setting, with ongoing pressure on property related steel demand generating recent sharp iron ore downside.

Meanwhile, Snowdon believes that the driver behind Goldman's long-running bullish view on copper - a global supply shock - continues:

Copper’s supply shock progresses. The metal with most significant upside potential is copper, in our view. The supply shock which began with aggressive concentrate destocking and then sharp mine supply downgrades last year, has now advanced to an increasing bind on metal production, as reflected in this week's China smelter supply rationing signal. With continued positive momentum in China's copper demand, a healthy refined import trend should generate a substantial ex-China refined deficit this year. With LME stocks having halved from Q4 peak, China’s imminent seasonal demand inflection should accelerate a path into extreme tightness by H2. Structural supply underinvestment, best reflected in peak mine supply we expect next year, implies that demand destruction will need to be the persistent solver on scarcity, an effect requiring substantially higher pricing than current, in our view. In this context, we maintain our view that the copper price will surge into next year (GSe 2025 $15,000/t average), expecting copper to rise to $10,000/t by year-end and then $12,000/t by end of Q1-25’

Another reason why Goldman is doubling down on its bullish copper outlook: gold.

The sharp rally in gold price since the beginning of March has ended the period of consolidation that had been present since late December. Whilst the initial catalyst for the break higher came from a (gold) supportive turn in US data and real rates, the move has been significantly amplified by short term systematic buying, which suggests less sticky upside. In this context, we expect gold to consolidate for now, with our economists near term view on rates and the dollar suggesting limited near-term catalysts for further upside momentum. Yet, a substantive retracement lower will also likely be limited by resilience in physical buying channels. Nonetheless, in the midterm we continue to hold a constructive view on gold underpinned by persistent strength in EM demand as well as eventual Fed easing, which should crucially reactivate the largely for now dormant ETF buying channel. In this context, we increase our average gold price forecast for 2024 from $2,090/toz to $2,180/toz, targeting a move to $2,300/toz by year-end.

Much more in the full Goldman note available to pro subs.

Tyler Durden Fri, 03/15/2024 - 14:25

Read More

Continue Reading

International

The millions of people not looking for work in the UK may be prioritising education, health and freedom

Economic inactivity is not always the worst option.

Published

on

By

Taking time out. pathdoc/Shutterstock

Around one in five British people of working age (16-64) are now outside the labour market. Neither in work nor looking for work, they are officially labelled as “economically inactive”.

Some of those 9.2 million people are in education, with many students not active in the labour market because they are studying full-time. Others are older workers who have chosen to take early retirement.

But that still leaves a large number who are not part of the labour market because they are unable to work. And one key driver of economic inactivity in recent years has been illness.

This increase in economic inactivity – which has grown since before the pandemic – is not just harming the economy, but also indicative of a deeper health crisis.

For those suffering ill health, there are real constraints on access to work. People with health-limiting conditions cannot just slot into jobs that are available. They need help to address the illnesses they have, and to re-engage with work through organisations offering supportive and healthy work environments.

And for other groups, such as stay-at-home parents, businesses need to offer flexible work arrangements and subsidised childcare to support the transition from economic inactivity into work.

The government has a role to play too. Most obviously, it could increase investment in the NHS. Rising levels of poor health are linked to years of under-investment in the health sector and economic inactivity will not be tackled without more funding.

Carrots and sticks

For the time being though, the UK government appears to prefer an approach which mixes carrots and sticks. In the March 2024 budget, for example, the chancellor cut national insurance by 2p as a way of “making work pay”.

But it is unclear whether small tax changes like this will have any effect on attracting the economically inactive back into work.

Jeremy Hunt also extended free childcare. But again, questions remain over whether this is sufficient to remove barriers to work for those with parental responsibilities. The high cost and lack of availability of childcare remain key weaknesses in the UK economy.

The benefit system meanwhile has been designed to push people into work. Benefits in the UK remain relatively ungenerous and hard to access compared with other rich countries. But labour shortages won’t be solved by simply forcing the economically inactive into work, because not all of them are ready or able to comply.

It is also worth noting that work itself may be a cause of bad health. The notion of “bad work” – work that does not pay enough and is unrewarding in other ways – can lead to economic inactivity.

There is also evidence that as work has become more intensive over recent decades, for some people, work itself has become a health risk.

The pandemic showed us how certain groups of workers (including so-called “essential workers”) suffered more ill health due to their greater exposure to COVID. But there are broader trends towards lower quality work that predate the pandemic, and these trends suggest improving job quality is an important step towards tackling the underlying causes of economic inactivity.

Freedom

Another big section of the economically active population who cannot be ignored are those who have retired early and deliberately left the labour market behind. These are people who want and value – and crucially, can afford – a life without work.

Here, the effects of the pandemic can be seen again. During those years of lockdowns, furlough and remote working, many of us reassessed our relationship with our jobs. Changed attitudes towards work among some (mostly older) workers can explain why they are no longer in the labour market and why they may be unresponsive to job offers of any kind.

Sign on railings supporting NHS staff during pandemic.
COVID made many people reassess their priorities. Alex Yeung/Shutterstock

And maybe it is from this viewpoint that we should ultimately be looking at economic inactivity – that it is actually a sign of progress. That it represents a move towards freedom from the drudgery of work and the ability of some people to live as they wish.

There are utopian visions of the future, for example, which suggest that individual and collective freedom could be dramatically increased by paying people a universal basic income.

In the meantime, for plenty of working age people, economic inactivity is a direct result of ill health and sickness. So it may be that the levels of economic inactivity right now merely show how far we are from being a society which actually supports its citizens’ wellbeing.

David Spencer has received funding from the ESRC.

Read More

Continue Reading

International

Illegal Immigrants Leave US Hospitals With Billions In Unpaid Bills

Illegal Immigrants Leave US Hospitals With Billions In Unpaid Bills

By Autumn Spredemann of The Epoch Times

Tens of thousands of illegal…

Published

on

Illegal Immigrants Leave US Hospitals With Billions In Unpaid Bills

By Autumn Spredemann of The Epoch Times

Tens of thousands of illegal immigrants are flooding into U.S. hospitals for treatment and leaving billions in uncompensated health care costs in their wake.

The House Committee on Homeland Security recently released a report illustrating that from the estimated $451 billion in annual costs stemming from the U.S. border crisis, a significant portion is going to health care for illegal immigrants.

With the majority of the illegal immigrant population lacking any kind of medical insurance, hospitals and government welfare programs such as Medicaid are feeling the weight of these unanticipated costs.

Apprehensions of illegal immigrants at the U.S. border have jumped 48 percent since the record in fiscal year 2021 and nearly tripled since fiscal year 2019, according to Customs and Border Protection data.

Last year broke a new record high for illegal border crossings, surpassing more than 3.2 million apprehensions.

And with that sea of humanity comes the need for health care and, in most cases, the inability to pay for it.

In January, CEO of Denver Health Donna Lynne told reporters that 8,000 illegal immigrants made roughly 20,000 visits to the city’s health system in 2023.

The total bill for uncompensated care costs last year to the system totaled $140 million, said Dane Roper, public information officer for Denver Health. More than $10 million of it was attributed to “care for new immigrants,” he told The Epoch Times.

Though the amount of debt assigned to illegal immigrants is a fraction of the total, uncompensated care costs in the Denver Health system have risen dramatically over the past few years.

The total uncompensated costs in 2020 came to $60 million, Mr. Roper said. In 2022, the number doubled, hitting $120 million.

He also said their city hospitals are treating issues such as “respiratory illnesses, GI [gastro-intenstinal] illnesses, dental disease, and some common chronic illnesses such as asthma and diabetes.”

“The perspective we’ve been trying to emphasize all along is that providing healthcare services for an influx of new immigrants who are unable to pay for their care is adding additional strain to an already significant uncompensated care burden,” Mr. Roper said.

He added this is why a local, state, and federal response to the needs of the new illegal immigrant population is “so important.”

Colorado is far from the only state struggling with a trail of unpaid hospital bills.

EMS medics with the Houston Fire Department transport a Mexican woman the hospital in Houston on Aug. 12, 2020. (John Moore/Getty Images)

Dr. Robert Trenschel, CEO of the Yuma Regional Medical Center situated on the Arizona–Mexico border, said on average, illegal immigrants cost up to three times more in human resources to resolve their cases and provide a safe discharge.

“Some [illegal] migrants come with minor ailments, but many of them come in with significant disease,” Dr. Trenschel said during a congressional hearing last year.

“We’ve had migrant patients on dialysis, cardiac catheterization, and in need of heart surgery. Many are very sick.”

He said many illegal immigrants who enter the country and need medical assistance end up staying in the ICU ward for 60 days or more.

A large portion of the patients are pregnant women who’ve had little to no prenatal treatment. This has resulted in an increase in babies being born that require neonatal care for 30 days or longer.

Dr. Trenschel told The Epoch Times last year that illegal immigrants were overrunning healthcare services in his town, leaving the hospital with $26 million in unpaid medical bills in just 12 months.

ER Duty to Care

The Emergency Medical Treatment and Labor Act of 1986 requires that public hospitals participating in Medicare “must medically screen all persons seeking emergency care … regardless of payment method or insurance status.”

The numbers are difficult to gauge as the policy position of the Centers for Medicare & Medicaid Services (CMS) is that it “will not require hospital staff to ask patients directly about their citizenship or immigration status.”

In southern California, again close to the border with Mexico, some hospitals are struggling with an influx of illegal immigrants.

American patients are enduring longer wait times for doctor appointments due to a nursing shortage in the state, two health care professionals told The Epoch Times in January.

A health care worker at a hospital in Southern California, who asked not to be named for fear of losing her job, told The Epoch Times that “the entire health care system is just being bombarded” by a steady stream of illegal immigrants.

“Our healthcare system is so overwhelmed, and then add on top of that tuberculosis, COVID-19, and other diseases from all over the world,” she said.

A Salvadorian man is aided by medical workers after cutting his leg while trying to jump on a truck in Matias Romero, Mexico, on Nov. 2, 2018. (Spencer Platt/Getty Images)

A newly-enacted law in California provides free healthcare for all illegal immigrants residing in the state. The law could cost taxpayers between $3 billion and $6 billion per year, according to recent estimates by state and federal lawmakers.

In New York, where the illegal immigration crisis has manifested most notably beyond the southern border, city and state officials have long been accommodating of illegal immigrants’ healthcare costs.

Since June 2014, when then-mayor Bill de Blasio set up The Task Force on Immigrant Health Care Access, New York City has worked to expand avenues for illegal immigrants to get free health care.

“New York City has a moral duty to ensure that all its residents have meaningful access to needed health care, regardless of their immigration status or ability to pay,” Mr. de Blasio stated in a 2015 report.

The report notes that in 2013, nearly 64 percent of illegal immigrants were uninsured. Since then, tens of thousands of illegal immigrants have settled in the city.

“The uninsured rate for undocumented immigrants is more than three times that of other noncitizens in New York City (20 percent) and more than six times greater than the uninsured rate for the rest of the city (10 percent),” the report states.

The report states that because healthcare providers don’t ask patients about documentation status, the task force lacks “data specific to undocumented patients.”

Some health care providers say a big part of the issue is that without a clear path to insurance or payment for non-emergency services, illegal immigrants are going to the hospital due to a lack of options.

“It’s insane, and it has been for years at this point,” Dana, a Texas emergency room nurse who asked to have her full name omitted, told The Epoch Times.

Working for a major hospital system in the greater Houston area, Dana has seen “a zillion” migrants pass through under her watch with “no end in sight.” She said many who are illegal immigrants arrive with treatable illnesses that require simple antibiotics. “Not a lot of GPs [general practitioners] will see you if you can’t pay and don’t have insurance.”

She said the “undocumented crowd” tends to arrive with a lot of the same conditions. Many find their way to Houston not long after crossing the southern border. Some of the common health issues Dana encounters include dehydration, unhealed fractures, respiratory illnesses, stomach ailments, and pregnancy-related concerns.

“This isn’t a new problem, it’s just worse now,” Dana said.

Emergency room nurses and EMTs tend to patients in hallways at the Houston Methodist The Woodlands Hospital in Houston on Aug. 18, 2021. (Brandon Bell/Getty Images)

Medicaid Factor

One of the main government healthcare resources illegal immigrants use is Medicaid.

All those who don’t qualify for regular Medicaid are eligible for Emergency Medicaid, regardless of immigration status. By doing this, the program helps pay for the cost of uncompensated care bills at qualifying hospitals.

However, some loopholes allow access to the regular Medicaid benefits. “Qualified noncitizens” who haven’t been granted legal status within five years still qualify if they’re listed as a refugee, an asylum seeker, or a Cuban or Haitian national.

Yet the lion’s share of Medicaid usage by illegal immigrants still comes through state-level benefits and emergency medical treatment.

A Congressional report highlighted data from the CMS, which showed total Medicaid costs for “emergency services for undocumented aliens” in fiscal year 2021 surpassed $7 billion, and totaled more than $5 billion in fiscal 2022.

Both years represent a significant spike from the $3 billion in fiscal 2020.

An employee working with Medicaid who asked to be referred to only as Jennifer out of concern for her job, told The Epoch Times that at a state level, it’s easy for an illegal immigrant to access the program benefits.

Jennifer said that when exceptions are sent from states to CMS for approval, “denial is actually super rare. It’s usually always approved.”

She also said it comes as no surprise that many of the states with the highest amount of Medicaid spending are sanctuary states, which tend to have policies and laws that shield illegal immigrants from federal immigration authorities.

Moreover, Jennifer said there are ways for states to get around CMS guidelines. “It’s not easy, but it can and has been done.”

The first generation of illegal immigrants who arrive to the United States tend to be healthy enough to pass any pre-screenings, but Jennifer has observed that the subsequent generations tend to be sicker and require more access to care. If a family is illegally present, they tend to use Emergency Medicaid or nothing at all.

The Epoch Times asked Medicaid Services to provide the most recent data for the total uncompensated care that hospitals have reported. The agency didn’t respond.

Continue reading over at The Epoch Times

Tyler Durden Fri, 03/15/2024 - 09:45

Read More

Continue Reading

Trending