Wikipedia -WSS

Wikipedia

author：leisure time 2025-09-02 08:23:53 - browse：39

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Virginia high school admissions case could be legal follow
Next article： The lessons of Aduhelm, an Alzheimer's drug that was not to be

hotspot

WSS

Apple Vision Pro: A first look at health apps on the new VR headset

Biden administration opens offers in Medicare drug price negotiations

Juul spent big to court Black leaders to promote its e

ARCH Venture Partners is raising $3 billion for a life sciences fund

New Ultima Genomics DNA sequencer can read genome for $100

New Ultima Genomics DNA sequencer can read genome for $100

hotspot

Wikipedia

hotspot

George Santos makes 1st court appearance after pleading not guilty to 13 counts

ARCH Venture Partners is raising $3 billion for a life sciences fund

Bright Health sells Medicare Advantage business to Molina

Vertex non

Dobbs anniversary: the lost opportunity of abortion as health care

What we need to know about Arena Bioworks

FDA approval of Sarepta Duchenne genetic therapy gives me hope

FDA drug safety: Singulair case shows systemic surveillance flaws

Medical records are filled with copy

Cybersecurity threat forces Lurie Children's to take systems offline

focus

Novo Nordisk to expand supply of Wegovy for U.S. patients

Covid misinformation case heads to Supreme Court

SAMSHA loosens regulations on methadone treatment centers

New Ultima Genomics DNA sequencer can read genome for $100

The lessons of Aduhelm, an Alzheimer's drug that was not to be

Cybersecurity threat forces Lurie Children's to take systems offline

focus

leisure time

hotspot

hotspot