fashion -WSS

fashion

author：Wikipedia 2025-10-06 17:20:12 - browse：34778

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： DIEP, the 'gold standard' of breast reconstruction, is under threat
Next article： New weight loss drugs work. But how can they best be used?

WSS

The history of OxyContin, told through Purdue Pharma documents

White House drug shortages task force keeps mum with Congress

TB outbreak tied to bone grafts underscores testing shortcomings

UCB departs biotech trade group BIO

Novo acquires Inversago for up to $1 billion

The FDA must approve intranasal treatments for anaphylaxis

Wikipedia

fashion

focus

Trump demands the U.S. pay no more for drugs than other countries … again

Where are patients getting their prescriptions for GLP

Sports medicine is finally prioritizing gender equality

The history of OxyContin, told through Purdue Pharma documents

Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies

The FDA must approve intranasal treatments for anaphylaxis

Bright Health sells Medicare Advantage business to Molina

Chronically ill young patients struggle to find fertility info

Cancer drug shortages should be causing more outrage

Trump, Nauta plead not guilty to new classified docs charges but De Oliveira still not arraigned

knowledge

The FDA must approve intranasal treatments for anaphylaxis

Pharma budget tightening trickles down to Doximity

Kim Kardashian sparks debate on benefits of full

Who are the detained American citizens released from prison in Iran?

Pharma budget tightening trickles down to Doximity

Why psychiatrists like me stop taking insurance

leisure time

hotspot

focus

focus