Wikipedia -WSS

Wikipedia

author：Wikipedia 2025-09-30 11:57:48 - browse：967

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Activists slam private health insurers over coverage restrictions
Next article： First Opinion Podcast: What happens when kids become caregivers?

WSS

Amylyx's ALS drug launch starts strong. It could be trouble for FDA

Readout Newsletter: Moderna bird flu vaccine, Biohaven, ASCO

Merck to buy EyeBio, maker of eye drug, as it grows pipeline

Merus drug and Keytruda shrank tumors in patients with head and neck cancer

Twitch streamer Kai Cenat speaks out for 1st time since causing mayhem with Union Square giveaway

A biotech analyst on neuroscience, placebo effect, not over

hotspot

Wikipedia

leisure time

BioMarin wins approval for gene therapy to treat hemophilia A

Stigma and the return of syphilis

Guidelines to prevent youth baseball injuries need more muscle

Hawaii wildfires fueled by Hurricane Dora's winds prompt evacuations

Wildfire smoke exposes gaps in outdoor worker protections

American woman, child freed after being kidnapped in Haiti last month

23andMe had bad news about my health. I wish a person had delivered it

Average age of first period drops to 11.9 years, study shows

The high cost of giving birth even with insurance

Drastic changes should bring profitability, startup health insurers say

hotspot

Anavex keeps shifting the goalposts in its clinical trials

In same hospitals, Black patients receive fewer opioids than white patients

South Korea throws huge K

Insmed lung disease drug hits target in key Phase 3 trial

Naloxone nonprofit donates 200,000 doses after FDA approval

Health insurers say they are turning to AI to cut costs, improve care

Wikipedia

leisure time

focus

hotspot