entertainment -WSS

entertainment

author：leisure time 2025-08-31 18:41:56 - browse：16

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： How one medical school became remarkably diverse
Next article： Readout Newsletter: Cytokinetics and Novartis' starcrossed tale

WSS

Stories you might have missed in 2023: health, science, medicine

Mitch McConnell episode has important public health takeaway

Mega Millions pot grows to $1.25 billion after no winner

National panel will explore requiring free Covid tests

What the US credit downgrade means for the economy, your finances

Vertex non

leisure time

entertainment

entertainment

Sports medicine is finally prioritizing gender equality

Infectious disease expert Jeanne Marrazzo assumes Fauci role

Supreme Court strikes down use of affirmative action

In shift, Texas to cover initial consult for Afghan baby's gene therapy

23andMe had bad news about my health. I wish a person had delivered it

Stories you might have missed in 2023: health, science, medicine

Drug repurposing or repositioning? The language matters

Hospital chaplains balance Covid safety with patients’ spiritual needs

Moonlake's readout produced a cash windfall. Risks remain

What to expect as Trump is arraigned on his Jan 6. indictment

knowledge

American taxpayers paid $1.8 trillion in health care costs in 2022

Nonprofit, backed by Microsoft, to certify AI tools in health care

Profiling embryos to choose those with higher IQs is almost a reality

Nonprofit, backed by Microsoft, to certify AI tools in health care

Mega Millions pot grows to $1.25 billion after no winner

Hyundai and Kia recall nearly 92,000 vehicles and tell owners to park them outside due to fire risk

hotspot

hotspot

focus

focus