entertainment -WSS

entertainment

author：explore 2025-10-02 22:57:04 - browse：74

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： ChatGPT in medicine: STAT answers readers' burning questions
Next article： Readout LOUD podcast: Merger Mondays, Ozempic panic

WSS

Researchers CRISPR chickens in bid to protect them from bird flu

Humana CEO Bruce Broussard to step down in 2024

DOJ, FTC to increase scrutiny of all types of health care mergers

Life sciences deals on track to hit lowest point since 2017

Nick Jonas talks about managing diabetes along with his career

Suspected Gilgo Beach killer appeared 'traumatized' after arrest: Defense attorney

hotspot

entertainment

knowledge

Hepatitis C has a cure — but many Americans still lack access to it

Why some people catch Covid but never get sick

Wildfire smoke exposes gaps in outdoor worker protections

Russia strikes Ukraine's critical port facilities in Odesa after halting grain deal

Guidelines to prevent youth baseball injuries need more muscle

STAT Readout: Today's biotech news includes Sana and Amylyx

Anesthesiologist group: stop taking Ozempic before surgery

Plane’s emergency slide plummets from sky, hits Chicago home

Novavax promises a turnaround & Lilly roils the obesity market

Medicare to cover more brain scans related to Alzheimer’s drugs

entertainment

A revolution in caring for preterm infants

Takeaways from AdvaMed, the largest medical devices conference

UnitedHealth’s Q3 profit jumps as medical costs rise more slowly

Why some people catch Covid but never get sick

Celebrate National Dole Whip Day for 3 days this week at Disney

DOJ, FTC to increase scrutiny of all types of health care mergers

hotspot

Wikipedia

Wikipedia

Wikipedia