fashion -WSS

fashion

author：comprehensive 2025-09-03 09:34:33 - browse：2817

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Continuity nursing helped my family in our darkest PICU moments
Next article： FDA reorg will put new emphasis on investigations, sources say

WSS

GSK to buy asthma

Healthy food access boosts outcomes in two studies

Readout LOUD podcast: 2023 in review, and a look at biotech in 2024

Doulas covered by Medicaid under New York's new plan

The nurse manager staffing crisis is hurting patients

Cancer diagnosis changes perspective doctor, former hospital CEO

explore

fashion

hotspot

Duchenne breakthrough therapy leaves behind pioneering families

Eli Lilly’s chief scientist on obesity drugs, gene editing, and more

United colonoscopy coverage change 'may cost lives,' doctors say

Idaho abortion case may prompt more restrictions in other states

The high cost of giving birth even with insurance

Medical school prerequisites are outdated

Cancer drug shortages should be causing more outrage

Biotech reporter’s notebook: A sunnier mood at JPM 2024

Malaria cases in Florida and Texas: Here’s what you need to know

JPM 2024: Nvidia claims we're in biological revolution. Are we?

explore

Caregivers of transplant patients call for more support, training

Experimental asthma app from Apple and Anthem shows promise

First transplant of an entire human eye performed

Fauci’s Covid grilling leads GOP to weigh foreign research rules

Carbon Health diabetes program, a test of data

How I ended up pumping milk in a bathroom stall at JPM 2024

leisure time

focus

focus

explore