Wikipedia -WSS

Wikipedia

author：fashion 2025-08-26 23:48:42 - browse：936

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Sports medicine is finally prioritizing gender equality
Next article： Mass General Brigham physicians react to latest merger step

explore

hotspot

WSS

Mindstrong's demise and the future of mental health care

After a drawn out lobbying fight, ARPA

Bird flu in dairy cattle: New measures to control spread to humans

Alzheimer's risk factor APOE4 may be a distinct form of the disease

Depression: FDA OKs Otsuka Pharmaceuticals digital therapeutic

People with mental disorders often marry others with same

hotspot

Wikipedia

hotspot

Sports medicine is finally prioritizing gender equality

Listen: Who gets the credit for GLP

George Santos makes 1st court appearance after pleading not guilty to 13 counts

Oral obesity drug from Viking Therapeutics hits key early target

Medical records are filled with copy

How one patient went off dialysis — and others can too

BioMarin wins approval for gene therapy to treat hemophilia A

Bird flu reported in person exposed to presumably infected cattle

In age of alternative facts, a scholarly course on calling out crap

Florida Supreme Court upholds state's abortion ban

explore

Oral obesity drug from Viking Therapeutics hits key early target

Overprescribed: High cost isn't America's only drug problem

Insurer loopholes limit power of law against surprise medical bills

Senator probes 340B programs at Cleveland Clinic, Bon Secours

Readout Newsletter: Biogen, Eisai, Aardvark Therapeutics, etc.

Ionis has late

focus

explore

hotspot

entertainment