fashion -WSS

fashion

author：Wikipedia 2025-10-01 20:06:36 - browse：23647

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Psychedelics group wrestles with new pharma identity
Next article： Change Healthcare can notify patients about the breach, HHS says

hotspot

WSS

Change Healthcare can notify patients about the breach, HHS says

Kaiser's Risant Health gobbled up Geisinger. Who is next?

For one rare type of lung cancer, Pfizer pill reduces progression by 81%

Elon Musk says Twitter has 'negative cash flow' and 'heavy debt'

NIH documents show early flaws of $1.6 billion long Covid program

Elon Musk says Twitter has 'negative cash flow' and 'heavy debt'

hotspot

fashion

focus

The cancer drug shortage isn’t new — and neither are the solutions

Ionis drug prevents swelling attacks due to hereditary angioedema

The high cost of giving birth even with insurance

Care demand spikes challenge UnitedHealth’s provider arm

Walensky prepares to leave CDC — and Congress — behind

Eli Lilly to acquire Versanis in heated race for weight loss drugs

As demand for Covid shots wanes, Moderna seeks its next success

Change Healthcare can notify patients about the breach, HHS says

As demand for Covid shots wanes, Moderna seeks its next success

NIH documents show early flaws of $1.6 billion long Covid program

leisure time

With trial win, GSK could get blood cancer drug back on market

At ASCO, AstraZeneca reports strong data for breast cancer drug

ASCO: AstraZeneca's hat trick, and palliative care's spotlight

Woman returns to dialysis after doctors remove transplanted pig kidney

Shifting the focus from loneliness to social health

Woman returns to dialysis after doctors remove transplanted pig kidney

Wikipedia

hotspot

entertainment

leisure time