Wikipedia -WSS

Wikipedia

author：hotspot 2025-10-06 09:06:45 - browse：74894

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Novavax promises a turnaround & Lilly roils the obesity market
Next article： Readout Newsletter: The latest from Bristol, Sarepta, and Novartis

WSS

Telehealth options flood the market as retailers push virtual care

Biden's order seeks to regulate AI risk without stifling innovation

OTC birth control: A brief history of over the counter pill design

What the cancer research community can learn from the Covid response

Influencer to be charged after chaos erupts in New York City's Union Square

Treeline, Josh Bilenker's next biotech, is cloaked in mystery

focus

Wikipedia

focus

After affirmative action ruling, medical educators look to 'holistic review'

Diversifying clinical trials isn't enough to close racial gaps: study

Alkermes shareholders re

Cassava reveals details — and problems — with Alzheimer's study

Supreme Court strikes down use of affirmative action

Maker of FluMist seeks to allow at

Sports medicine is finally prioritizing gender equality

Readout Newsletter: New research from Sanofi, Regeneron, etc.

In age of alternative facts, a scholarly course on calling out crap

FDA has safety concerns on CRISPR

leisure time

Nearly two

Physician subsidies by hospitals soar in wake of No Surprises Act

Who is Magistrate Judge Moxila Upadhyaya in Trump's Jan. 6 case?

Emergency medicine has repudiated 'excited delirium.' Now what?

Chimpanzees, like humans and whales, get menopause: Study

FDA approves Eli Lilly ulcerative colitis treatment Omvoh

hotspot

leisure time

Wikipedia

hotspot