　　毕胜不懂得电子商务，“哥们儿不懂电子商务，真的不懂。

entertainment

author：knowledge 2025-08-11 16:24:27 - browse：313

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Heart attack and stroke risk calculators need revising
Next article： Eli Lilly’s Zepbound improved liver scarring in mid

WSS

Sutter Health’s antitrust win overturned by appeals court

Male and female sex labels in research insufficient, scientists say

UCLA team creates talking throat patch for voice disorders

Anthony Fauci pushes back on GOP claims during Covid hearing

Readout Newsletter: CAR

Male and female sex labels in research insufficient, scientists say

hotspot

entertainment

explore

What does generative AI mean for health care? We asked experts

Medicare coverage of Wegovy, once blocked, now looks possible

Activists slam private health insurers over coverage restrictions

FDA approves Moderna’s RSV vaccine, its second licensed product

Dobbs anniversary: the lost opportunity of abortion as health care

Boston's new lab space is opening empty

Duchenne breakthrough therapy leaves behind pioneering families

Take antibiotics after sex, CDC recommends for certain risk groups

In Memoriam: Notable people who died in 2023

Eli Lilly’s Zepbound improved liver scarring in mid

hotspot

Acadia's Nuplazid fails as schizophrenia medicine in Phase 3 study

Pushing for an NIH office for post

Pushing for an NIH office for post

Medicare coverage of Wegovy, once blocked, now looks possible

BD to buy Edwards patient monitoring unit for $4.2 billion

UCLA team creates talking throat patch for voice disorders

leisure time

entertainment

knowledge

Wikipedia