entertainment -WSS

entertainment

author：leisure time 2025-10-02 17:23:01 - browse：17959

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Medical records are filled with copy
Next article： Senate panel clears PBM, hopsital reforms

WSS

With Roe v Wade overturned, abortion providers work to adapt

The new shift in health care is toward less care

Diversify hospital leadership teams to protect BIPOC patient health

Don't let 'shelved assets' gather dust. Make them into new lifesaving drugs

White House calls on federal agencies to crack down on AI abuses

Biotech incubator Curie.Bio graduates its first startup

entertainment

entertainment

leisure time

Hepatitis C has a cure — but many Americans still lack access to it

New oral drug delivery patch is modeled after octopus tentacles

Duchenne breakthrough therapy leaves behind pioneering families

Victims of gun violence feel impacts long after bullet wound

Wildfire smoke exposes gaps in outdoor worker protections

FDA sees ‘potential systemic bias’ in Amgen’s KRAS drug trial

The high cost of giving birth even with insurance

Extreme heat events are a public health emergency

As demand for Covid shots wanes, Moderna seeks its next success

Senate panel clears PBM, hopsital reforms

hotspot

Victims of gun violence feel impacts long after bullet wound

A clever new way to fix Medicaid and graduate medical education

FDA sees ‘potential systemic bias’ in Amgen’s KRAS drug trial

AstraZeneca CEO says participant had neurological symptoms, could be discharged today

Flu, Covid vaccination rates decline, new survey data show

IVG is promising — but it won’t replace IVF quite yet

Wikipedia

focus

Wikipedia

knowledge