Wikipedia -WSS

Wikipedia

author：focus 2025-10-01 18:44:45 - browse：1142

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： ChatGPT in medicine: STAT answers readers' burning questions
Next article： UnitedHealth, in a surprise, takes aim at Steward’s physician group

knowledge

WSS

Alzheimer's risk factor APOE4 may be a distinct form of the disease

People with mental disorders often marry others with same

Group behind ProMed defends move to subscription

Hundreds died while taking an arthritis drug, but nobody alerted patients

Covid silver lining: Unprecedented look at human immune system

Harvard scientists, with Google, unveil the most detailed brain map ever

leisure time

Wikipedia

leisure time

Peter Hotez and the public health issue of online harassment

Trial using CRISPR to edit HIV out of cells disappoints

Jerome Adams on the need for new antivirals for Covid

Mass General Brigham physicians react to latest merger step

Psychedelics group wrestles with new pharma identity

Covid silver lining: Unprecedented look at human immune system

Peter Hotez and the public health issue of online harassment

Scientific mystery highlights the blind spots in genomics databases

New air purifier tech could be key to improving indoor air quality

A controversial new treatment promises to make little people taller

focus

How to ethically and practically extend health care to all

First Opinion on colorectal cancer screening: letter and response

Study links childhood stress with decline in older age

Oral obesity drug from Viking Therapeutics hits key early target

Heart disease in astronauts blamed on cosmic radiation

FDA scientists endorse Pfizer/BioNTech Covid

focus

knowledge

Wikipedia

Wikipedia