fashion -WSS

fashion

author：Wikipedia 2025-08-23 18:39:07 - browse：19

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Medicare details structure of new drug price negotiation program
Next article： Researchers explore possible ties between long Covid, menopause

explore

hotspot

WSS

Suspects arrested after 3 women attacked on Manhattan's West Side: Police

Trump Organization, Michael Cohen agree to settle million

STAT Summit: How a Chicago ER doctor tackles gun violence

Language on climate change, ESG removed from company website of Montana GOP Senate candidate

NIH confirmation hearing shows politicization of research

Family of Gilgo Beach murder suspect releases statement: 'Devastating time'

entertainment

fashion

focus

Over 800 arrested across France in 3rd night of riots after fatal police shooting of teen

'The View' co

Novavax promises a turnaround & Lilly roils the obesity market

Why Marc Tessier

Indiana Supreme Court upholds abortion ban, says state constitution gives only limited protections

Study: Misdiagnosis causes 800,000 deaths, serious disabilities a year in U.S.

Virginia high school admissions case could be legal follow

A new deal aims to ramp up use of AI in rehab care decisions

Medicare proposal to cover medical devices draws a mixed reaction

How Brent Saunders' Allergan experiment failed

focus

FDA struggles to regulate food additives, sometimes for decades

CEOs share strategies for surviving biotech slump

A new deal aims to ramp up use of AI in rehab care decisions

First Opinion Podcast: Long Covid needs a new approach

STAT Summit: Biotech founders on deal

Florida babysitter arrested over hot car death, authorities say

explore

hotspot

leisure time

focus