What the DRC Ebola Outbreak Reveals About Health Data Readiness
The world’s second-largest Ebola outbreak is exposing gaps in surveillance, interoperability and cross-border reporting — and giving health data leaders a real-time test case for whether their systems can detect a fast-moving pathogen before it arrives.
An outbreak most Americans have not heard about is quietly rewriting what public-health leaders thought they knew about Ebola. The Bundibugyo strain now circulating in the Democratic Republic of the Congo has produced the fastest-spreading Ebola epidemic ever documented, and the response gap it has exposed is less about virology than about data, surveillance, and the readiness of health systems to see something coming before it arrives at the door.
For health-data leaders in Boston, Chicago, San Francisco, or anywhere in between, the DRC outbreak is not a distant news item. It is a live case study in interoperability, syndromic surveillance, and cross-border reporting. It also raises a question every U.S. health system will eventually have to answer: if a novel or reemerging pathogen arrived tomorrow, would our data infrastructure actually notice?
What the numbers actually say
The World Health Organization confirmed 2,124 cases and 828 deaths as of July 15, and by the end of July the United Nations Office for the Coordination of Humanitarian Affairs reported 3,605 confirmed cases and 1,587 deaths across DRC. That is a jump of roughly 1,500 cases and 750 deaths in about two weeks. In the most recent complete reporting week, 567 new cases and 296 new deaths were recorded, the highest weekly totals since the outbreak began in mid-May.
Africa CDC has characterized this as the fastest-growing Ebola outbreak ever. The comparison is stark: this epidemic surpassed 1,000 confirmed cases in 40 days of response activation, while the 2018 North Kivu outbreak took roughly 235 days to reach that same threshold. Only the 2014–2016 West Africa outbreak, which produced 28,616 cases and 11,310 deaths, remains larger.
Ituri province accounts for 88 percent of confirmed cases and 82.6 percent of reported deaths, but transmission has now expanded into North Kivu, South Kivu, Haut-Uele, and Tshopo, with 33 of 49 affected health zones still active. Uganda, which reported 20 total cases and two deaths after an imported case in mid-May, officially declared the end of its outbreak on July 28 after completing the 42-day monitoring period.
The clinical picture is unusually severe. The Bundibugyo strain historically carries a case fatality rate near 35 percent, but observed mortality in this outbreak has run substantially higher, and WHO has warned the true death toll may be two to four times what is officially recorded because many patients are dying at home without ever entering the health system.
Why this outbreak behaves differently
Three features distinguish this event from previous Ebola emergencies and carry direct implications for anyone who works in health information exchange, surveillance, or emergency preparedness.
First, there is no licensed vaccine or approved therapeutic for Bundibugyo. The two Ebola vaccines that shaped the 2018–2020 and West Africa responses target the Zaire species. In response, the Oxford Vaccine Group launched a Phase 1 trial of a Bundibugyo-specific candidate, BD-Ebov, on July 13, while the WHO-sponsored PARTNERS platform trial began enrolling patients in Ituri to evaluate the monoclonal antibody cocktail MBP134 and the antiviral remdesivir against optimized supportive care. These are hopeful but early-stage interventions.
Second, contact tracing is failing. WHO reports that more than 80 percent of new cases are emerging from unknown chains of transmission, meaning epidemiologists cannot link most patients to a known contact. That signal, untraceable transmission at scale, is precisely the pattern that a mature health information exchange should be able to detect and flag automatically, and its absence in Ituri is a warning about what happens when the underlying data plumbing is thin.
Third, the response is being conducted against active insecurity. At least 12 attacks on health facilities and response teams have been recorded, at least 36 infected healthcare workers have died, and treatment centers have run at 95 percent occupancy while staff have periodically gone on strike over unpaid wages. Roughly two-thirds of Ebola deaths are occurring outside the health system, which means the surveillance data available to national and international responders is systematically undercounting the true burden.
What this means outside the impacted areas
The most useful frame for U.S. and international leaders is not "will Ebola reach us", the CDC, WHO, and Pan American Health Organization continue to assess global risk as low, but rather "would our systems perform any better than the DRC's if a fast-moving pathogen appeared here." Four implications follow.
Enhanced border surveillance is already active, and the data flows behind it matter. CDC has implemented tiered entry screening for travelers from DRC, Uganda, and South Sudan at IAD, ATL, IAH, and JFK, with asymptomatic travelers actively monitored by destination state health departments for 21 days. Two U.S. humanitarian workers were medically evacuated to Germany after testing positive, and a second imported case surfaced in France. Every one of those interventions depends on clean handoffs between federal screening records, state health departments, and local providers, precisely the interoperability workflows that health data leaders are responsible for maintaining in peacetime.
Syndromic surveillance is only as good as its weakest feed. The DRC outbreak accelerated because case identification lagged transmission. U.S. syndromic surveillance depends on ED chief-complaint data, laboratory reporting, and increasingly ambulatory records moving through regional HIEs. If a state HIE cannot receive and normalize ELR feeds from every reporting hospital within hours, its surveillance capability has a ceiling that may not have been measured recently.
Cross-jurisdiction data sharing is the choke point. The Uganda declaration of Ebola-free status depended on rigorous 42-day monitoring data that had to be shared across national and WHO systems. In the United States, the equivalent is data sharing between HIEs, public-health agencies, and CDC's disease-specific systems. The ECDC's rapid risk assessment for the DRC outbreak is explicit that timely reporting is what allowed European countries to detect and contain the imported French case. Health-data leaders should audit whether their organizations can push notifiable-condition data to public-health authorities within the timeframes their state statutes actually require.
Health-data infrastructure is a legitimate global-health investment. The UN has warned the outbreak could cost Africa as much as $3.6 billion and put 300,000 jobs at risk, a scale that reflects downstream economic damage far more than direct treatment costs. Investment in interoperable case-reporting systems, workforce credentialing platforms, and community-facing digital tools would meaningfully reduce those costs in future outbreaks, a case executives can make to boards and policymakers with more confidence than a decade ago.
Practical steps for the next 90 days
Leaders who want to translate this moment into readiness can start with four actions. Confirm that ELR, syndromic, and case-reporting feeds are current and that receiving public-health endpoints acknowledge them. Run a tabletop exercise using the DRC scenario as the seed, an imported hemorrhagic fever case with no licensed vaccine, and measure how long it takes incident command to receive, validate, and act on the first suspected-case alert. Review interstate data-sharing agreements and the technical interfaces behind them. Finally, examine workforce data: do you know in real time which clinicians are trained, credentialed, and equipped to manage a viral hemorrhagic fever patient?
The DRC outbreak will be studied for years, and the epidemiological lessons will accumulate. The data-infrastructure lessons are available right now, at no cost, if leaders choose to look.
Kenneth R. Deans, Jr., DHA, MBA, FACHDM is the President and CEO of Health Sciences South Carolina.