Stories
Slash Boxes
Comments
typodupeerror delete not in

Comments: 383 +-   CT Scan "Reset Error" Gives 206 Patients Radiation Overdose on Wednesday October 14, @11:41AM

Posted by Soulskill on Wednesday October 14, @11:41AM
from the paging-dr-simpson dept.
medicine
hardhack
news
jeffb (2.718) writes "As the LA Times reports, 206 patients receiving CT scans at Cedar Sinai hospital received up to eight times the X-ray exposure doctors intended. (The FDA alert gives details about the doses involved.) A misunderstanding over an 'embedded default setting' appears to have led to the error, which occurred when the hospital 'began using a new protocol for a specialized type of scan used to diagnose strokes. Doctors believed it would provide them more useful data to analyze disruptions in the flow of blood to brain tissue.' Human-computer interaction classes from the late 1980s onward have pounded home the lesson of the Therac-25, the usability issues of which led to multiple deaths. Will we ever learn enough to make these errors truly uncommittable?"
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by s73v3r (963317) on Wednesday October 14, @11:44AM (#29746441)
    As long as people are involved in some way, no.
    • by courteaudotbiz (1191083) on Wednesday October 14, @11:52AM (#29746559) Homepage
      Mmmmm, anyway, people are always involved if you have a machine. The machine didn't build itself!
    • by Alaren (682568) on Wednesday October 14, @12:20PM (#29746893) Homepage

      This is probably modded insightful because we're all familiar with "human error," but it misses the point of the article (and is sort of misanthropic, too).

      This particular error is the kind that occurs when you simplify complex procedures in the interest of widespread use. It is the fault of specialization, which we typically embrace because it allows us to leverage human labor into increasingly complex areas of inquiry. It's more than just "human oversight" or "machine failure," it's the kind of problem that typically arises when people are trained to use machines without being trained to fully understand those machines.

      A certain segment of society--that's mostly us geeks--strives against this tendency; we become technicians in various fields. But most people, including medical people, get trained by vendors to use a particular piece of software or hardware without reference to its underlying principles or inner workings. This is normal and usually beneficial for various reasons an economist could doubtless relate.

      The sad reality is that, so long as it doesn't kill too many people, any innovation that leads to greater economic efficiency will be accepted and embraced. The obvious example is automobiles, which (even adjusting for factors like alcohol) kill a startlingly large number of people. Those deaths are mourned, but ultimately absorbed by the human race as the cost of doing business. This makes some people resent automation, resent technology, et cetera... but most of us find other ways to cope.

      • by antifoidulus (807088) on Wednesday October 14, @12:30PM (#29747049) Homepage Journal
        The advantages of simplified training are not just beneficial on an economic scale. While its unfortunate that this error killed people, think of how many more people would die if complex training was required to use these types of machines. Ultimately, it would lead to fewer operators and thus less access to the machine, which ostensibly helps save lives.
      • by digitig (1056110) on Wednesday October 14, @01:02PM (#29747467)

        This particular error is the kind that occurs when you simplify complex procedures in the interest of widespread use. It is the fault of specialization, which we typically embrace because it allows us to leverage human labor into increasingly complex areas of inquiry. It's more than just "human oversight" or "machine failure," it's the kind of problem that typically arises when people are trained to use machines without being trained to fully understand those machines.

        A certain segment of society--that's mostly us geeks--strives against this tendency; we become technicians in various fields. But most people, including medical people, get trained by vendors to use a particular piece of software or hardware without reference to its underlying principles or inner workings. This is normal and usually beneficial for various reasons an economist could doubtless relate.

        But one of the things that we geeks should be doing is looking at equipment like this in its overall system context, which includes the operator and which includes the training the operator has received. That's mandatory in the Aviation industry pretty much worldwide (my field); I don't know what the situation is for medical equipment in the USA. No, we will never make such mistakes "uncommittable" -- perfect safety is a myth. But we should be considering possible failure modes, and the likelihood and consequences of those failure modes, to ensure that the risk is tolerable.

        • Re: (Score:3, Insightful)

          Yes, because we all know that car accidents only kill stupid people...

          I don't think the laws of physics cares how high your IQ is when you get t-boned by a drunk driver at an intersection.

            • by Ironica (124657) <pixel&boondock,org> on Wednesday October 14, @03:05PM (#29749197) Journal

              ...But in that particular accident, the drunk is less likely to suffer severe or fatal injuries. The relaxant effect of alcohol makes their body more resilient to sudden shocks. Also, they're usually having a head-on collision, while they may be striking the other vehicle from the side; as head-on collisions are by far the most common, most of a car's safety features are geared toward mitigating them.

                • by Ironica (124657) <pixel&boondock,org> on Wednesday October 14, @05:40PM (#29750977) Journal

                  Woops, silly me, repeating what I learned in upper-division Transportation Engineering lecture from professors with decades of experience in the field of road design. Guess I should have checked Wikipedia first, because it never lies!

                  Got a cite for your critique?

                  It's true that the majority of people who die in alcohol-related crashes have a BAC of .08 or higher (67% according to this site [movetransport.com]). However, lower down, we see that 37% of single-car crashes involve a BAC of .08 or higher, which is higher than the 22% average rate. Since my point was about the comparative risks to the drunk driver and the sober driver in an accident, single-car crashes are irrelevant. That takes out 67% of the drunk driving crashes overall, and similarly lowers the fatality numbers considerably.

  • by PhasmatisApparatus (1086395) on Wednesday October 14, @11:44AM (#29746447)
    Requiring that doctors RTFM is the first step.
    • by betterunixthanunix (980855) on Wednesday October 14, @11:49AM (#29746493)
      The machine's software should not be capable of triggering the release of that much radiation; any change in the radiation levels should require some kind of hardware interaction. Even an idiot who did not RTFM should not be able to cause harm with the machine.
      • by vertinox (846076) on Wednesday October 14, @11:58AM (#29746627)

        The machine's software should not be capable of triggering the release of that much radiation; any change in the radiation levels should require some kind of hardware interaction. Even an idiot who did not RTFM should not be able to cause harm with the machine.

        I'm not sure what you mean by this? Most hardware is software these days.

        Or are you talking about having a red button with a safety lock on it that has to be pushed in order to work?

        Either way, people still bypass hardware solutions.

        • by Serenissima (1210562) on Wednesday October 14, @12:07PM (#29746761)
          I think he means it should be hardwired into the unit to NEVER EVER exceed a certain level of X-Ray radiation. That should be the default. If there's some medical reason why the dosage needs to increase, you should have to turn it UP to that dosage and then the machine should reset itself to the default. There should NEVER be a problem of the machine defaulting to an extremely high level of radiation requiring personnel to turn it down. It should always start out low in case some dumbass technician runs the machine without making any changes.
          • by Sockatume (732728) on Wednesday October 14, @12:30PM (#29747043) Homepage

            Don't even hard-wire it. Engineer it so that operating in the high-dose regime requires physical intervention, a "Kill Handle" with a lock and key. The machine should be physically incapable of generating an above-standard dose when the "Kill Handle" is not being held. Limit the power, or something. (The aformentioned Therac incident happened, in part, because such a hardware interlock did not exist.)

            • Re: (Score:3, Insightful)

              by Darinbob (1142669)
              And as I posted earlier, customers have been caught with weights to hold down buttons.

              In this particular case though, that particular dosage may have been appropriate to some uses, but not others. A "maximum allowed dose" can be in effect and still make a patient sick!

              For some machines these doses are controlled mechanically; moving heavy lead and steel plates around, irises, etc. Hardwiring a maximum dosage in this case involves the interaction between many components.
              • by uncqual (836337) on Wednesday October 14, @01:52PM (#29748195)
                Just make the button detect authorized fingerprints only and require a heartbeat in the finger and also scan the operator's retina and alter lighting to make sure that the iris responds "correctly" to random changes in light level.

                Bet you can't circumvent that with just duct tape. Now, with an Arduino, some peripheral hardware and a few spare evenings....
            • Re: (Score:3, Funny)

              by uncqual (836337)
              Reminds me of "back in the days" of the early mass market terminals that allowed you to program keys to send sequences of arbitrary characters.

              One of the system admins at school was trying out the latest and greatest such beast in his office before deploying it and thought it was a good idea to program F1 to send his userid and password. He also thought that the terminal would not retain the memory when he unplugged it to deploy the device to the public terminal room.

              He learned that two stupid thought
            • by lysergic.acid (845423) on Wednesday October 14, @03:27PM (#29749501) Homepage

              Thank god you're not responsible for the design of complex, life-critical systems, like those commonly found on passenger jets, in nuclear power plants, in high-speed rail systems, etc. All of those systems incorporate fail-safe measures so that if something were to go wrong (like an operator losing control) the system would fallback on a safe state.

              Sure, in an ideal world, every operator of a life-critical system would have total understanding of that system, know the value of every system setting at all times, never forget, never be tired, and have an IQ of 200. In the real world, operators are often overworked, susceptible to distractions, minimally qualified, and sometimes under-trained or even improperly trained. Even the most experienced and well-trained veteran airline pilots can lose focus and make deadly mistakes (which is why Cockpit Resource Management has been a major area of research in aviation psychology). You can base your system design on ideal conditions, or you can base it off of real-world conditions; either way, it's going to be operating in the later.

              You also seem to be missing the main purpose of mechanization and automation, which is to simplify a task or make it easier to perform. When you buy a cappuccino machine, you don't want to understand the details of how it operates or be asked for input every step of the process to make a cup of coffee. Eliminating/minimizing the human factor in a particular process is another major advantage of automation. It provides more consistent results and helps to minimize human error. All of this helps to reduce the learning curve and skill level required to perform a task, which confers economic benefits. However, not every well-designed system can necessarily be operated by unskilled personnel—nor would you want a high school drop out to be operating most life-critical systems. Nonetheless, you still want mechanization/automation to simplify the task in these cases. That's because some tasks are so inherently complex and mentally demanding that, without automation, it simply can't be performed.

              Flying a passenger jet is a perfect example of this. Even with all the sophisticated automation (including autopilot) on a modern airliner, it still takes a full cockpit crew (not to mention support personnel on the ground) to safely fly & land the plane. With all of the complex duties that airline pilots need to perform simultaneously, they don't have the time to monitor the status of every system component or manually adjust every actuator on the plane to control its flight surfaces. It may take 50 different mechanical actions to retract the landing gear on a plane, but why clutter the cockpit interface with 50 items when a single switch or button will do? Likewise, doctors and nurses are already required to undergo extensive medical training; they don't need to have to learn how to mechanically calibrate a CO2 laser or calculate the spectrum of an X-ray machine based on the anode material of its emitter and the voltage passed through it. Medical personnel should mainly be trained in medicine and only need to learn how to operate a particular medical device, not how to troubleshoot it or read its blueprints.

              A simple and streamlined interface is much less distracting and more intuitive than a field of buttons and dials for a thousand different minute settings and system readings. Even with the utmost simplification, most industrial machinery and complex systems are still overwhelmingly difficult to operate by an untrained person. It's never just a single "magic button" for the operator to press. A nuclear power plant might take hundreds of different readings from multiple sensors and summarize it with a single status message or indicator light on a controller's console, but that message/light would likely be sitting next to a dozen other status indicators that each take hundreds of other readings. And although a complex process like lowering the reactor temperature might be simplified down to a single "magic button," the c

      • by snowraver1 (1052510) on Wednesday October 14, @11:59AM (#29746639)
        Hardware interaction... Like maybe "[...]resetting the machine to override the pre-programmed instructions that came with the scanner when it was installed."?

        I'm willing to bet that the person that modified the machine has read, at least, the relevant parts of the manual.
      • by Greyfox (87712) on Wednesday October 14, @12:36PM (#29747111) Homepage Journal
        My machine would irradiate the operators by default and would require that a obscure button sequence be pushed in order to irradiate the patient instead. That way the idiot who didn't RTFM would end up dying of radiation poisoning, not the patient. Eventually the survivors who DID RTFM would breed and pass on their proclivity to RTFM. Really it's for the good of the entire human race, if you think about it...
      • by BigDukeSix (832501) on Wednesday October 14, @01:12PM (#29747613)
        It's not quite that simple. The CT scanner is set up with a distinct scanning protocol for whatever part of the body you're imaging. If you're trying to get a detailed image of the bones of the pelvis you have to use more power than if you're imaging the lungs. The scan is further individualized by patient size. Given that infants and very large people are imaged on the same scanner, the software has to vary radiation dose over a reasonably wide range, and it's a different setting for every scan.
      • by Geoffrey.landis (926948) on Wednesday October 14, @01:17PM (#29747677) Homepage

        The machine's software should not be capable of triggering the release of that much radiation

        That sentence, essentially, just said "The machine did something bad. It should have been designed so it isn't allowed to do that."

        That's what qualifies as "insightful" these days????

    • by smitty777 (1612557) on Wednesday October 14, @11:55AM (#29746587) Journal

      Couldn't disagree more. Unfortunately, enforcing training and reading manuals would probably have little effect. In my 10+ years doing usability for missile systems, you have to build in the mechanisms to keep the users from doing bad things. Even if you force the user to read the *entire manual* before each use, people still have bad days, hangovers, fights with significant others. It has to be designed in.

      • Re: (Score:3, Interesting)

        by NonSequor (230139)

        Couldn't disagree more. Unfortunately, enforcing training and reading manuals would probably have little effect. In my 10+ years doing usability for missile systems, you have to build in the mechanisms to keep the users from doing bad things. Even if you force the user to read the *entire manual* before each use, people still have bad days, hangovers, fights with significant others. It has to be designed in.

        The story behind Murphy's Law [wikipedia.org] is pretty interesting and it ties in with this design philosophy.

        Basically the story is that a technician incorrectly installed force sensors and in response, Murphy got pissed off and said "If that guy has any way of making a mistake, he will."

        However, other people adapted that statement into "If anything can go wrong, it will," expressing the idea that if a system does not mechanically exclude the possibility of human error, human error can be expected to occur. This makes ac

  • Default setting... (Score:5, Insightful)

    by courteaudotbiz (1191083) on Wednesday October 14, @11:47AM (#29746475) Homepage
    The default setting for an equipment that can be lethal should be "Emit zero radiation". Then for each exposure, set the level of radiation you intend to use. This way, you ALWAYS KNOW the level of radiation the equipment will emit.

    Better investigate "Hey, we got no picture" than "Hey, we got pictures, but everyone dies after that..."

    Didn't RTFA.
    • by eln (21727) on Wednesday October 14, @11:52AM (#29746551) Homepage
      That's really not fair...you have no idea that people would die from that radiation. It's at least equally likely they would develop super powers, join up with others who have received similar doses of radiation, and form a crime fighting team of mutants.

      All I'm saying here is we shouldn't just dismiss this as a bad thing until we've fully explored the legislative and societal implications a team of crime-fighting mutants with superpowers would have.
  • HULK MAD! (Score:5, Funny)

    by BumbaCLot (472046) on Wednesday October 14, @11:47AM (#29746477)

    Even under normal circumstances, the procedure requires more radiation than most other types of CT scans, said David Brenner, director of radiological research at Columbia University Medical Center in New York.

    Anyone else read this as David Banner?

    • Re: (Score:3, Insightful)

      by frito_x (1138353)

      Hate this "immediately moderate when you select an option" feature. meant to mod funny... slip of the mouse goes to overrated... there should be a go/ok button next to the list imho.

      wasted 3 mod points... oh well...
           

  • by uncledrax (112438) on Wednesday October 14, @11:50AM (#29746523) Homepage

    Maybe next time they will test the damn thing before subjecting patients to it? It's a built in part of my job that I test/confirm a change after I make a change.. because often there's a likely hood of something unexpected or improperly explained that can cause an issue.

    How hard would it have been to stick a dosimeter in the machine after the change and run it though a test?
    (I realize that just a basic dosimeter might not be a sufficient measure.. but it would have been good to get a before/after.. and something like a 8-fold increase would have been easily detectable!)

    • by RDW (41497) on Wednesday October 14, @12:19PM (#29746887)

      'How hard would it have been to stick a dosimeter in the machine after the change and run it though a test'

      Supposedly the actual dose would have been displayed on the machine's screen (I wonder how prominently?):

      http://www.latimes.com/news/local/la-me-cedars-sinai14-2009oct14,0,5065886.story [latimes.com]

      '"It's in your face on the screen," said Dr. Donald Rucker, chief medical officer for Siemens, a manufacturer of CT scanners.'

      'CT technicians are trained to monitor dose levels, and some hospitals conduct checks before every scan..."There are other places where the techs might be operating more as button-pushers," said Dr. Geoffrey Rubin, a professor of radiology at Stanford University. "The user becomes a little blind to these numbers."'

    • by Geof (153857)

      The article is not very detailed, but my reading of it is that the default dose was not unsafe. If I am correct (hard to tell), what happened was that a doctor doing a specialized procedure programmed a custom dose. Then the machine defaulted to this new value for subsequent procedures, but the staff assumed it was using it's previous (safe) default.

      There was a misunderstanding about an embedded default setting applied by the machine . . . Once the scanner was programmed with the new instructions, the hig

  • by CheddarHead (811916) on Wednesday October 14, @11:58AM (#29746617)

    Along with the usability issues with the design of the Therac-25 it's obvious that the attitude of the medical staff contributed greatly to the problem. Patients complained of being burned, but their complaints were essentially ignored. Meanwhile, they were sent back for multiple treatments. Overwhelming evidence of radiation burns was ignored or given only cursory investigation because medical personal or manufacturer reps claimed that it was impossible for the Therac-25 to be responsible for the burns.

    • Re: (Score:3, Informative)

      by Svartalf (2997)

      If you read the history...about half of the deaths were due to one-shot incidents where the patent received a lethal dose out of the machine on the first treatment. To be sure, some of the incidents should have been dealt with differently as you indicate- but what about the Tyler, TX incidents, for example?

      Yes... Medical Staff are a big part. But so was the manufacturer of the device- had you read all the evasiveness on AECL's part when the problems started coming in. In the case of the first incident,

  • by TemporalBeing (803363) on Wednesday October 14, @11:59AM (#29746643) Homepage Journal

    Will we ever learn enough to make these errors truly uncommittable?"

    There is and never will be such a thing as a machine without the possibility for error. And you'll never get around the old adage/rule - If it can happen, it will. How often it occurs it the key; and while we should always aim to make an error-less machine, it is an impossibility and we can only achieve it by make the occurrence of such errors as few and far between as possible.

    After all, an error-prone human must be involved to make the machine; even if that machine made another machine a human was still involved at some point to make the original. Thus there will always be the possibility for errors. Even if, as demonstrated by the Matrix, iRobot, and many others, the machines make that error on purpose to save humanity - it is still an error.

  • Film badges? (Score:3, Interesting)

    by johnny cashed (590023) on Wednesday October 14, @12:02PM (#29746673) Homepage
    Would a film badge provide a "check" to determine if the dosage is correct? One x-ray overdose is bad enough, over 200 is really uncool.
  • Feedback? (Score:5, Interesting)

    by TopSpin (753) * on Wednesday October 14, @12:10PM (#29746789) Journal

    Will we ever learn enough to make these errors truly uncommittable?"

    No. As long as correctness can't be proven and operators are permitted to create unanalyzed conditions by altering protocols there will always be risk. There are probably other mis-configured CT scanners out there in use right now that have been overdosing patients for years.

    CT scans use X-rays; an easily detected frequency of light. Why not require that scanners incorporate an independent detector that measures the amount X-ray energy? If that is possible then create an interlock that can shut down the emitter when the net energy gets out of bounds and require that any such incident be NRC reportable. If the detector excluded from alteration by the operators then software bugs, misunderstandings, etc. can be detected even years after the last engineer had contact with the system, either before harm is done or at least before hundreds of patients are literally burned.

  • Oh great (Score:3, Funny)

    by Tony Hoyle (11698) <tmh@nodomain.org> on Wednesday October 14, @12:34PM (#29747091) Homepage

    Now there are 206 hulks running around.

    Just don't make them angry.

  • by ArcadeNut (85398) on Wednesday October 14, @01:37PM (#29747971) Homepage

    That pops up for the operator to respond to....

    Are you sure you want to kill this patient?

    Yes No Retry

  • by goodmanj (234846) on Wednesday October 14, @01:59PM (#29748283)

    Typical normal CT scan dose: 1-2 rem
    Faulty CT scan overdose: 8-16 rem
    1950s shoe-salesman's fluoroscope: 10 rem
    Typical normal Therac-25 dose: 200 rem
    Malfunctioning Therac-25 dose: 15-20,000 rem

    Come on, seriously people. Yes, this is a mistake that needs to be fixed, but millions of kids in the '50s got their feet nuked with this much radiation and lived to become healthy normal adults with normal feet.

    The Therac-25 cooked straight through people, leaving a hole of rotting meat behind. This is not even remotely in the same league.

    http://users.rcn.com/jkimball.ma.ultranet/BiologyPages/R/Radiation.html [rcn.com]
    http://chestjournal.chestpubs.org/content/107/1/113.full.pdf [chestpubs.org]
    http://www.ccnr.org/fatal_dose.html [ccnr.org]
    http://www.orau.org/ptp/collection/shoefittingfluor/shoe.htm [orau.org]

    • Re: (Score:3, Insightful)

      by Entropius (188861)

      Life is brutal, but that doesn't mean we should give up on trying to make it less so. Asking whether CT scanners can be redesigned to make this not happen, and whether it's worthwhile to do so, is very valid.

    • by MRe_nl (306212) on Wednesday October 14, @12:36PM (#29747119)

      In 1895, Thomas Edison investigated materials' ability to fluoresce when exposed to X-rays, and found that calcium tungstate was the most effective substance. Around March 1896, the fluoroscope he developed became the standard for medical X-ray examinations. Nevertheless, Edison dropped X-ray research around 1903 after the death of Clarence Madison Dally, one of his glassblowers. Dally had a habit of testing X-ray tubes on his hands, and acquired a cancer in them so tenacious that both arms were amputated in a futile attempt to save his life.

      • by DragonWriter (970822) on Wednesday October 14, @01:19PM (#29747711)

        It can actually become an issue if someone needs radiation therapy ('chemo')

        "chemo" refers to chemotherapy, where the patient is poisoned in the hopes that the poison will kill the cancer faster than it kills the patient. It is a different form of therapy than radiation therapy, in which the patient is subjected to intense doses of radiation in the hopes that the radiation will kill the cancer faster than it kills the patient. Often, people with cancer will receive both, one after the other, but they aren't the same thing.

It doesn't much signify whom one marries, for one is sure to find out next morning it was someone else. -- Will Rogers