Wikipedia -WSS

Wikipedia

author：hotspot 2025-10-02 06:26:54 - browse：1

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Affirmative action in medical school literally saved lives
Next article： Lung cancer screening guidelines updated for cigarette smokers

hotspot

WSS

Cuban government calls US nuclear submarine stop a 'provocative escalation'

Digital health funding stays low as a new reality sets in

After half a century, Israel moves to evict squatter from his cave home on the beach

All of Us, NIH's precision medicine initiative, gets a big boost

China sends large group of warplanes, navy ships towards Taiwan in forceful display

Live blog: Hearing on CRISPR

knowledge

Wikipedia

explore

Walensky prepares to leave CDC — and Congress — behind

The health care issue Democrats can’t solve: hospital reform

Sports medicine is finally prioritizing gender equality

Travis Kelce and the trap of celebrity vaccine endorsements

New air purifier tech could be key to improving indoor air quality

Va. Republicans encourage early voting, a target of Trump's, ahead of fall elections

FDA approval of Sarepta Duchenne genetic therapy gives me hope

Inflation cooled significantly in June, bringing price hikes close to normal levels

Walensky prepares to leave CDC — and Congress — behind

Women's World Cup brings attention to abuse in soccer

focus

Kerry to visit Beijing for climate talks amid efforts to revive relations between US and China

Is there an 'orca uprising'? Like orcas themselves, the answer is complex.

All of Us, NIH's precision medicine initiative, gets a big boost

STAT Readout: The latest on Wegovy, Mounjaro, and Covid shots

All of Us, NIH's precision medicine initiative, gets a big boost

What is microchimerism and how does it affect maternal health?

hotspot

hotspot

focus

knowledge