entertainment -WSS

entertainment

author：comprehensive 2025-09-29 22:38:24 - browse：71432

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： State Dept. review finds Biden bears some blame for Afghanistan failures
Next article： STAT Readout Newsletter: Biotech news today

WSS

Gene therapy has helped boys walk. Can scientists keep it that way?

Health tech investors get more selective as pandemic boom fades

The science behind Janet Jackson's pregnancy at 49

Roivant's CEO is a star, but biotech's black hole persists

STAT Readout Newsletter: Biotech news today

The science behind Janet Jackson's pregnancy at 49

focus

entertainment

focus

The Supreme Court will review a ruling striking down a domestic violence federal gun ban

The problems with dementia villages

Over 800 arrested across France in 3rd night of riots after fatal police shooting of teen

Harvard's Jason Buenrostro wins MacArthur grant for genetics work

Guidelines to prevent youth baseball injuries need more muscle

STAT Summit: How researchers deal with rejection

George Santos makes 1st court appearance after pleading not guilty to 13 counts

Why are elite athletes different? Take a look at their microbes

Medical records are filled with copy

The strategy behind pharma's lawsuits over drug pricing reform

hotspot

Death of patient in Alzheimer’s trial raises question of possible risks

STAT Readout Newsletter: Biotech news today

The future of Biogen: Pragmatism, ‘moonshots,’ and no Twinkies

The battle over the Brookhaven Landfill on Long Island

Gene therapy has helped boys walk. Can scientists keep it that way?

Harvard's Jason Buenrostro wins MacArthur grant for genetics work

Wikipedia

entertainment

focus

knowledge