Wikipedia -WSS

Wikipedia

author：explore 2025-09-03 11:49:36 - browse：5

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： After affirmative action ruling, medical educators look to 'holistic review'
Next article： Fatty liver disease was alleviated by Lilly’s ‘triple

WSS

How to fix the rural physician shortage in the U.S.

The biotech scorecard for Q3: 15 stock

The wait for US passports is creating travel purgatory and snarling summer plans

A letter from the executive editor: The 2023 STATUS List

What affirmative action's end means to a medical student

Why getting cancer drugs just got harder for rural patients

entertainment

Wikipedia

entertainment

Malaria cases in Florida and Texas: Here’s what you need to know

Change Healthcare cyberattack outage could last weeks

Apple is now the first public company to be valued at $3 trillion

Lupron, used to halt puberty in children, may cause lasting health problems

Alkermes shareholders re

Lupron, used to halt puberty in children, may cause lasting health problems

George Santos makes 1st court appearance after pleading not guilty to 13 counts

RSV vaccines may be linked to small increased risk of developing GBS

State Dept. review finds Biden bears some blame for Afghanistan failures

RSV vaccines may be linked to small increased risk of developing GBS

entertainment

FDA does about

The wait for US passports is creating travel purgatory and snarling summer plans

Hubble vs. James Webb telescope images: See the difference

Abortion pill mifepristone to soon be dispensed at CVS, Walgreens

The biotech scorecard for Q3: 15 stock

Prescription digital therapeutics are key to pharma’s future

Wikipedia

knowledge

hotspot

Wikipedia