Wikipedia -WSS

Wikipedia

author：entertainment 2025-09-28 09:27:59 - browse：4

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Guidelines to prevent youth baseball injuries need more muscle
Next article： Caribou posts encouraging results on off

WSS

Snackable artificial intelligence, expert AI, and the pharma industry

How a Boston hospital is priming medical residents to use GPT

Biotech execs pursue obesity drug boom: ‘It’s the early innings’

Eli Lilly to acquire DICE Therapeutics in $2.4 billion deal

House transparency, PBM reform bill gains bipartisan support

Seth Rogen and Lauren Miller Rogen on Alzheimer's caregiving

knowledge

Wikipedia

entertainment

Novavax promises a turnaround & Lilly roils the obesity market

Stanford president’s abrupt resignation sparks debate

State Dept. review finds Biden bears some blame for Afghanistan failures

Ethical issues complicate the benefits of medical crowdfunding

Indiana Supreme Court upholds abortion ban, says state constitution gives only limited protections

'CMA Fest' 2023: How to watch, who is performing and more

How to save PrEP access — and even expand it

Seth Rogen and Lauren Miller Rogen on Alzheimer's caregiving

Malaria cases in Florida and Texas: Here’s what you need to know

The stock market has soared this year, but will it last? Experts weigh in

Wikipedia

House transparency, PBM reform bill gains bipartisan support

Humana sues Biden admin over Medicare Advantage audit rule

What drug price negotiations mean for Medicare Part D

Sanders wants to replace patents with prizes for drug inventions

Crinetics acromegaly drug succeeds in late

5 dead in mass shooting on Caribbean island of St. Vincent: Police

focus

entertainment

Wikipedia

focus