Wikipedia -WSS

Wikipedia

author：focus 2025-10-03 00:40:40 - browse：9692

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： In Memoriam: Notable people who died in 2023
Next article： Cosmetics set for new safety regulation. Why the industry is on board

WSS

Erich Jarvis studies song birds to learn about human stuttering

With Wegovy coverage, Medicare patients may face high costs

How Medicaid coverage policies for immigrants impact new moms

Startup Neumora takes a novel depression drug to Phase 3

FDA approves RSV monoclonal antibody for infants, toddlers

Chinese researcher claims birth of first gene

knowledge

Wikipedia

focus

Medical records are filled with copy

Rescued Australian man who was adrift 3 months in Pacific with dog 'grateful' to be alive

Cancer drug shortages should be causing more outrage

STAT Virtual Event: The State of Biosimilars: What to Watch

Drug repurposing or repositioning? The language matters

Cancer, immunology, HIV research ensnared in fetal tissue politics

Duchenne breakthrough therapy leaves behind pioneering families

EHR maker NextGen Healthcare to pay $31M to resolve fraud claims

The high cost of giving birth even with insurance

Adam's Take: Intra

knowledge

WHO calls for emergency meeting on new China virus, as cases spread

U.K. officials, researchers try to ease path for bespoke genetic treatments

Adam's Take: Intra

Surgeons perform first xenotransplant using CRISPR'd pig kidney

As digital health tech proliferates, a new institute aims to cut through hype

How dance can help nurses traumatized by Covid

Wikipedia

leisure time

focus

knowledge