Wikipedia -WSS

Wikipedia

author：leisure time 2025-09-30 00:37:45 - browse：1214

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： New Eli Lilly Alzheimer’s data poses Medicare coverage conundrum
Next article： Readout Newsletter: Amylyx, Aurinia, and IQVIA

hotspot

WSS

Bird flu: Don't repeat Covid's 'health versus the economy' framing

Helping hospitals and community health centers plan for resilience

Readout Newsletter: Replicate, Biogen's Leqembi, and Humira

STAT Boddities: What happens to the brain when we get scared?

Case highlights the risks of experimental stem cell therapy

Bernie Sanders gets little from pharma CEOs on drug prices

explore

Wikipedia

focus

Cancer drug shortages should be causing more outrage

Eli Lilly reports tirzepatide MASH success during Q4 earnings

Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies

HIV vaccine remains elusive. Immunologists keep trying new ideas

How one medical school became remarkably diverse

Long Covid research funding gets a major boost from NIH

Medical records are filled with copy

NVIDIA and Google execs on the future of AI and drug discovery

Guidelines to prevent youth baseball injuries need more muscle

Solving academic medical centers' existential crisis

hotspot

Venture capitalist Bob Kocher on the state of digital health

Long Covid research funding gets a major boost from NIH

ACIP vaccine advisory panel sees its vacancies filled

Microsoft's Peter Lee says ChatGPT shouldn't be used for initial diagnosis

Can we make enough H5N1 bird flu vaccine if there's a pandemic?

Long Covid research funding gets a major boost from NIH

hotspot

leisure time

hotspot

explore