Wikipedia -WSS

Wikipedia

author：entertainment 2025-09-10 05:03:23 - browse：1

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Hepatitis C has a cure — but many Americans still lack access to it
Next article： Can U.S. cancer drug shortages be fixed?

WSS

Shingles, which affected Dianne Feinstein, is on the rise

People can get long Covid without testing positive for virus: Study

Sudafed saga points to U.S. issues with evaluating older drugs

Shingles, which affected Dianne Feinstein, is on the rise

Sudafed saga points to U.S. issues with evaluating older drugs

Roche's accidental data boosts hopes for anti

explore

Wikipedia

hotspot

George Santos makes 1st court appearance after pleading not guilty to 13 counts

Roche's accidental data boosts hopes for anti

The high cost of giving birth even with insurance

Medicare drug price negotiation program allowed for now

Activists slam private health insurers over coverage restrictions

How the first Native Hawaiian psychiatrist helped diversify medicine

How to save PrEP access — and even expand it

Did you have Obamacare on your GOP debate bingo card?

Jerome Adams on the need for new antivirals for Covid

Kaiser Permanente unions announce official strike date

explore

Shingles, which affected Dianne Feinstein, is on the rise

Sudafed saga points to U.S. issues with evaluating older drugs

FDA advisory panel to debate high blood pressure devices

Drugmakers bet big on mRNA for cancer. Why's Biden going in?

Abortion policy in the spotlight at Republican debate

Trans patients at the end of life deserve respect and dignity

knowledge

focus

explore

focus