entertainment -WSS

entertainment

author：entertainment 2025-09-27 18:53:30 - browse：57554

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Heart attack and stroke risk calculators need revising
Next article： ReNAgade cuts staff seven months after raising $300 million

WSS

What causes an itch? Researchers may have solved the mystery

Sanofi says it has 12 blockbusters on the way. Will investors believe it?

U.K. Biobank has 500,000 peoples' genome sequences available

SCOTUS to consider access to abortion pill mifepristone

The woman behind the Dana Farber

Teach medical students about patients with intellectual disabilities

entertainment

entertainment

entertainment

23andMe had bad news about my health. I wish a person had delivered it

Pharma patents targeted by Biden in move to slash drug prices

What does generative AI mean for health care? We asked experts

Takeda, Janssen join wearable maker to measure scratching

Supreme Court strikes down use of affirmative action

30 years of 'Listening to Prozac'

In Memoriam: Notable people who died in 2023

ReNAgade cuts staff seven months after raising $300 million

The Supreme Court will review a ruling striking down a domestic violence federal gun ban

Patients' immediate access to test results puts radiologists in a bind

explore

The woman behind the Dana Farber

Radiology is caught between AI's potential and concern for patients

Fetal surgery at risk from Dobbs and new abortion restrictions

UnitedHealth has 90,000 doctors — 10% of all physicians in U.S.

Leukemia patients are helped by Syndax's new type of therapy

After sickle

explore

explore

leisure time

Wikipedia