<code id='E6FA56B1FC'></code><style id='E6FA56B1FC'></style>
      • <acronym id='E6FA56B1FC'></acronym>
      <center id='E6FA56B1FC'><center id='E6FA56B1FC'><tfoot id='E6FA56B1FC'></tfoot></center><abbr id='E6FA56B1FC'><dir id='E6FA56B1FC'><tfoot id='E6FA56B1FC'></tfoot><noframes id='E6FA56B1FC'>
      • <optgroup id='E6FA56B1FC'><strike id='E6FA56B1FC'><sup id='E6FA56B1FC'></sup></strike><code id='E6FA56B1FC'></code></optgroup>
        5. <b id='E6FA56B1FC'><label id='E6FA56B1FC'><select id='E6FA56B1FC'><dt id='E6FA56B1FC'><span id='E6FA56B1FC'></span></dt></select></label></b><u id='E6FA56B1FC'></u>
          <i id='E6FA56B1FC'><strike id='E6FA56B1FC'><tt id='E6FA56B1FC'><pre id='E6FA56B1FC'></pre></tt></strike></i>
           


   

   

   
   
   
   
   
   
   
   
   
   
   
   
   

   
   
   
   
   
   
   
  
           
  
           
  
           
   
           
    
           
     
           
      
           
       
      
           
      
           
       
           
        
           
         
           
           
          
           
         
           
         
           
           
          
           
         
           
          
        
           
       
           
       
           
        
           
        
           
        
           
        
           
       
           
      
           
       
      
           
      
           
       
           
       
           
       
           
       
           
        
           
        
          
          00:00 
        
           
       
           
       
           
      
           
      
           
        
        
        
       
           
        00:00 
         
        00:00 
        LIVE 
       
           
        
       
           
        
           
        
           
        
           
        
           
       
           
       
           
       
           
        
        
        
        
        
        
        
        
        
      
           
       
    
    
      
           
       
           
      
           
     
           
     
           
       
     
           
     
           
      
           
      
           
      
           
      
           
       
           
      
           
      
           
      
           
       
           
       
          
         buffering 
       
           
      
           
      
           
       
           
        
           
        
          
          Replay 
        
           
       
           
      
           
       
      
           
      
           
       
           
       
           
        
           
        
           
        
           
       
           
      
           
      
           
      
           
      
           
      
           
       
           
      
           
     
           
     
           
      
           
     
           
     
           
      
           
       
           
        
           
       
           
       
           
        
          
          LIVE 
        
           
        00:00 
         /  
        00:00 
       
           
       
           
        
           
        
           
        
           
         
           
         
           
         
           
         
           
         
           
         
           
        
           
        
           
        
           
       
           
       
           
        
           
        
          
          LIVE 
        
           
       
           
       
           
        
           
        
          
          CC 
        
           
       
           
       
           
        
           
       
           
       
           
       
           
        
           
        
           
         
           
        
           
       
           
       
           
        
           
       
           
      
           
      
           
       
           
        
           
        
           
         
           
         
           
         
           
          
           
          
           
          
           
         
           
        
           
       
           
      
           
      
           
       
           
     
       
           
    
       
           
       
    
  
       
           
   
       
           
       
       
           
      
           
      
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       
           
       Opacity : 
        
      
           
     
           
     
           
     
           
      
           
  
     
           
    
           
    
           
    
           
     
          
       Share: 
     
           
      
     
           
      
      Copy 
     
           
      
    
           
    
          
      Close 
      
    
           
    
           
      
    
           
    
           
   
           
  
           
  
           
    
    
    
   
           
   
           
 
    
   
           
   
           
   
           
    
           
     
           
      
           
       
           
        
           
          
          
         
          
          explore 

          
          
            
          
          

           
           
        
           
       
           
      
           
     
           
    
           
    
           
     
           
      
           
      
           

                       
          fashion  
          
                                   
                 
                                      author：focus   
                                        
                                      
                                      -
 
browse：1
                                  
                                    
          
                                    
            
          
 
          data thief
          Adobe
          In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.
          Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.
          advertisement
          Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.
          Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!					
          GET STARTED													Log In											
           
 
 
          

                              
          
                                 Previous article：

                                
                                          After affirmative action ruling, medical educators look to 'holistic review'
                                
                            
          Next article：  
                                      
                                          Listen: BridgeBio's big week & Lilly's Alzheimer's data
                                                                    
          

      
           
      
           
        
           
                                               
        
           knowledge 
           
                   
      
           
  
  
          
    
          
        
          
            
          
                                                     
                
          leisure time
          
                            
          
        
          
        
    
          

          

    

      
           
     
           


   
    
           
   
           
  
 

  
           
    
           
           
           
            
            Back To Top 
           
           
           
           

            
           
                                                                    
                 
          entertainment
           
                                      
            
           
          
           
                                                          
             
          focus
           
                             
            
           
            
           

                                                         
             
          focus
           
               
              
            
           
            
           
                                                         
             
          entertainment
           
                             
      
           
 
     
           
     
           
      
          
              StephenMaturen/GettyImagesPhysiciansdomanythingswell.Onethingtheyaren’tgoodatisshowinguptovote.Thatb
             
           
      
          
        © 2013-2023.Company name All rights reserved.Site Map 
         WSS-More Templates  
             Guangdong ICP98597name