fashion -WSS

fashion

author：leisure time 2025-09-27 09:44:23 - browse：15886

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： As demand for Covid shots wanes, Moderna seeks its next success
Next article： Innovation in antibiotics is ailing. 'Brain drain' may kill it

hotspot

WSS

Intellia reports positive results for its CRISPR

Letters to First Opinion on caregivers, digital health, and more

FDA's Pazdur wants cancer trials to range beyond China alone

Shifting the focus from loneliness to social health

At ASCO, pharma leaders speak of advances in 'smart bomb' drugs

Innovation in antibiotics is ailing. 'Brain drain' may kill it

focus

fashion

focus

Biden outlines 'new path' to provide student loan relief after Supreme Court rejection

See how much Covid

Moonlake's readout produced a cash windfall. Risks remain

Biogen walks away from Aduhelm, years after polarizing approval

Guidelines to prevent youth baseball injuries need more muscle

Philips to halt sales of sleep apnea machines in U.S.

Virginia high school admissions case could be legal follow

Innovation in antibiotics is ailing. 'Brain drain' may kill it

Biden outlines 'new path' to provide student loan relief after Supreme Court rejection

Philips to halt sales of sleep apnea machines in U.S.

knowledge

New clues to why women have higher risk of autoimmune disorders

Kaiser's Risant Health gobbled up Geisinger. Who is next?

Change Healthcare can notify patients about the breach, HHS says

At ASCO, AstraZeneca reports strong data for breast cancer drug

White House pharmacy plagued with problems, investigation finds

Pancreatic cancer early detection could be helped by AI

hotspot

hotspot

Wikipedia

explore