fashion -WSS

fashion

author：focus 2025-10-01 11:32:57 - browse：19

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Sports medicine is finally prioritizing gender equality
Next article： Montana youths win climate lawsuit against state for promoting fossil fuels

entertainment

leisure time

WSS

Timeline: How the deadly wildfires took over Maui day by day

White House calls on federal agencies to crack down on AI abuses

Biden administration begins canceling student loan debt for 804,000 borrowers

Abortion clinic in Cancun will cater to Americans

Excited delirium, Elijah McClain, and emergency physicians

Indictment alleges Trump's ex

explore

fashion

Wikipedia

ChatGPT in medicine: STAT answers readers' burning questions

Idaho college killings prosecutors challenge defense's grand jury claims

Dobbs anniversary: the lost opportunity of abortion as health care

Judge sides with young activists in first

Medical records are filled with copy

Medicare will require more price transparency from hospitals

Continuity nursing helped my family in our darkest PICU moments

Judge sides with young activists in first

Continuity nursing helped my family in our darkest PICU moments

STAT Executive Editor Rick Berke on STAT's 8th birthday

leisure time

FDA approves potent Eli Lilly obesity drug, Zepbound

A clever new way to fix Medicaid and graduate medical education

Just how powerful is the placebo effect?

UCSF medical school apologizes for unethical prisoner experiments

Patients, digital health players weigh in on FTC's data privacy plan

What to know about the judge who will handle the Trump case

hotspot

entertainment

leisure time

focus