Wikipedia -WSS

Wikipedia

author：fashion 2025-10-02 21:07:30 - browse：6227

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： FDA approval of Sarepta Duchenne genetic therapy gives me hope
Next article： Medicare Advantage beneficiaries sue Humana over algorithm use

WSS

Keeping primary care docs in field isn't impossible, says AAFP CEO

Submersible on Titanic tour reported missing off Newfoundland with 5 people aboard

Virtual care provider acquires bankrupt Pear's prescription apps

Sen. Bill Cassidy on how to lower drug prices

Albert Bourla of Pfizer: worst biopharma CEO of 2023

With fresh data, a dynamic duo powers Eli Lilly to new heights

explore

Wikipedia

entertainment

Affirmative action in medical school literally saved lives

Trump seeks lengthy delay of classified docs trial, citing upcoming election

How to save PrEP access — and even expand it

Father who lunged at Larry Nassar comforted by deputy who pinned him down: 'I understand'

Novavax promises a turnaround & Lilly roils the obesity market

Medicare Advantage beneficiaries sue Humana over algorithm use

FDA approval of Sarepta Duchenne genetic therapy gives me hope

Virtual care provider acquires bankrupt Pear's prescription apps

FDA approval of Sarepta Duchenne genetic therapy gives me hope

Kansas must stop changing trans people's sex listing on driver's licenses, judge says

entertainment

Albert Bourla of Pfizer: worst biopharma CEO of 2023

What are cluster munitions? Biden defends decision to send controversial weapons to Ukraine

Titanic submersible: What a 'catastrophic implosion' means and what officials found

Virtual care provider acquires bankrupt Pear's prescription apps

Readout Newsletter: The latest on Moderna, Apellis, and Merck

Submersible on Titanic tour reported missing off Newfoundland with 5 people aboard

hotspot

focus

leisure time

focus