fashion -WSS

fashion

author：fashion 2025-09-29 01:08:30 - browse：3

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Drug repurposing or repositioning? The language matters
Next article： Precocious puberty in girls comes with mental health risks

WSS

In surprise move, FDA calls for advisory committee on Lilly's Alzheimer's drug

What STAT readers think about the FDA and patient advocacy

The problem with charging patients to message their doctors

Change Healthcare payments predicted restored March 15

SNAP should offer more nutrition education

Precocious puberty in girls comes with mental health risks

knowledge

fashion

explore

Over 800 arrested across France in 3rd night of riots after fatal police shooting of teen

Why health records don't always know when patients are dead

Sports medicine is finally prioritizing gender equality

IVF, abortion rights issues kick off Biden’s State of the Union

Medicare proposal to cover medical devices draws a mixed reaction

Grail spinoff by Illumina should end disastrous merger attempt

As demand for Covid shots wanes, Moderna seeks its next success

Three trends to watch in biotech in 2024

Walensky prepares to leave CDC — and Congress — behind

Headspace, Meta partner to launch VR meditation app for Quest

hotspot

A deep dive into Applied Therapeutics’ data, and questions on Cassava

Change Healthcare cyberattack prompts Medicare loan program

How to bring more disabled researchers into academia

Keeping primary care docs in field isn't impossible, says AAFP CEO

Novo Nordisk obesity pill bests Wegovy in early trial

How to keep neuroscience’s past racism from being its future

explore

focus

Wikipedia

explore