fashion -WSS

fashion

author：explore 2025-09-28 18:47:51 - browse：4

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies
Next article： VC firm General Catalyst wants to buy a health system

knowledge

WSS

With psoriasis trial ahead, Alumis raises $259 million

Just how do doctors, lawmakers, and the public define abortion?

With psoriasis trial ahead, Alumis raises $259 million

Readout Newsletter: Acadia, Eli Lilly, Madrigal Pharma updates

Senate panel eyes new effort on drug shortages

Analysis of telehealth claims data suggest service duplication

Wikipedia

fashion

leisure time

Affirmative action in medical school literally saved lives

When women are denied an abortion, their children fare worse than peers

Guidelines to prevent youth baseball injuries need more muscle

FDA rejects Alnylam's heart disease treatment over insufficient data

Wildfire smoke exposes gaps in outdoor worker protections

UnitedHealth quietly bought dozens of outpatient centers

FDA approval of Sarepta Duchenne genetic therapy gives me hope

Why Charlie Gard's case is so disturbing to Americans

The Supreme Court will review a ruling striking down a domestic violence federal gun ban

A deep dive into Applied Therapeutics’ data, and questions on Cassava

hotspot

What it’s like to watch children die of measles

Was Amgen transparent enough on FDA's concern on cancer drug?

Why age limits for politicians are a terrible idea

Chan Zuckerberg Biohub Chicago to focus on inflammation

UnitedHealth quietly bought dozens of outpatient centers

Air quality improving but still lags in Black, Hispanic communities

knowledge

focus

knowledge

focus