Wikipedia -WSS

Wikipedia

author：comprehensive 2025-10-01 08:21:21 - browse：2166

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Medicare proposal to cover medical devices draws a mixed reaction
Next article： Timeline: How the deadly wildfires took over Maui day by day

leisure time

WSS

CRISPR pioneers react to Casgevy, first gene

FDA's Woodcock to retire early next year

YouTube cracks down on misinformation on cancer treatment

Biogen’s boardroom scandal saddles CEO with first crisis

Readout Newsletter: What is Casgevy? Does Wegovy hurt muscle?

Schizophrenia gene found to be linked to cells' energy dysfunction

hotspot

Wikipedia

leisure time

Anesthesiologist group: stop taking Ozempic before surgery

YouTube cracks down on misinformation on cancer treatment

Heart attack and stroke risk calculators need revising

Readout LOUD podcast: A CRISPR milestone, biotech mixology

In Memoriam: Notable people who died in 2023

Buoyed by wins on obesity, Novo Nordisk eyes heart disease

Alkermes shareholders re

Readout Newsletter: Bayer study halts, Carmot to IPO, and more

Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies

In key trial, Verve's treatment lowers cholesterol levels in patients

focus

Bird flu researchers hone in on Finland’s mink farms

Gain of function research would be limited under House proposal

Readout Newsletter: Bayer's future, Merck Caraway acquisition, etc

Readout LOUD podcast: A CRISPR milestone, biotech mixology

Mark Cuban is blaming the wrong people for high drug costs

Illinois Supreme Court finds assault weapons ban constitutional

focus

leisure time

hotspot

focus