entertainment -WSS

entertainment

author：entertainment 2025-10-01 12:35:28 - browse：9

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： In Memoriam: Notable people who died in 2023
Next article： Positive childhood experiences can help future health

entertainment

WSS

UnitedHealth increases loan offers after Change Healthcare outage

Nurses recount patients attacks

Former Georgia lieutenant governor says he received grand jury subpoena

Methadone treatment changes are coming. Do they go far enough?

'Of course' Trump lost the 2020 election, DeSantis says after years of hedging

Trump attorney outlines possible Jan. 6 legal defenses, but some experts are skeptical

leisure time

entertainment

focus

Drug repurposing or repositioning? The language matters

Asbestos, a deadly carcinogen, banned by EPA

Biden outlines 'new path' to provide student loan relief after Supreme Court rejection

Lessons Learned: This is why you network to find that industry job you want

23andMe had bad news about my health. I wish a person had delivered it

Astronauts get first look at the spacecraft that will fly them around the moon

Dobbs anniversary: the lost opportunity of abortion as health care

Gene editing the human germline: What are the risks?

FDA approval of Sarepta Duchenne genetic therapy gives me hope

'Of course' Trump lost the 2020 election, DeSantis says after years of hedging

hotspot

Creating egg and sperm cells from stem cells raises ethical issues

CVS Caremark has created a new ploy: the drug ‘rebate credit’

Biden praises World Series champion Astros for impact off the field during White House celebration

Stop the failed accountable care organization experiment

Positive childhood experiences can help future health

Plastic surgeons increase patient psychiatric screenings

explore

entertainment

Wikipedia

hotspot