fashion -WSS

fashion

author：fashion 2025-09-30 14:58:55 - browse：81189

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Medicare proposal to cover medical devices draws a mixed reaction
Next article： Weight loss drug costs may need more research, senator suggests

WSS

Does good food count as health care? Study aims to find out

Childhood cancer progress stalls for Black, Hispanic kids: Report

FDA weighs limits of animal data in assessing artificial wombs

Congress must reauthorize a committee to support older Americans

Wegovy, Zepbound and weight loss drugs that preserve muscle

David Sabatini, ex

hotspot

fashion

hotspot

How one medical school became remarkably diverse

Buoyed by wins on obesity, Novo Nordisk eyes heart disease

Medicare proposal to cover medical devices draws a mixed reaction

Readout Newsletter: The latest at Gilead, Catalent, and the NIH

Guidelines to prevent youth baseball injuries need more muscle

Patients, doctors press FTC to beef up hospital merger scrutiny

Guidelines to prevent youth baseball injuries need more muscle

In key trial, Verve's treatment lowers cholesterol levels in patients

After affirmative action ruling, medical educators look to 'holistic review'

Why the quest to eradicate polio has stumbled

Wikipedia

Weight loss drug costs may need more research, senator suggests

Neurocrine congenital adrenal hyperplasia trial succeeds

PBM reforms clear House panel

David Sabatini, ex

PBMs drew scrutiny in House hearing — and so did pharma

PBM reforms clear House panel

hotspot

entertainment

leisure time

hotspot