Hackers mining third-party apps to steal your health data

19-10-2021 Tue 10:42 IST | IANS | Technology
Hackers mining third-party apps to steal your health data

San Francisco, Oct 19 : Hospitals and health care systems have become a major target for hackers during the Covid-19 pandemic and a new report has claimed that third-party apps that pull patient data from electronic health record (EHR) systems are vulnerable to hacking.

The researchers at app security company Approov were able to access over 4 million patient and clinician records from over 25,000 providers through third-party apps that link up with hospital health records to pull out data.

"Cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators' application programming interfaces, along with associated apps that track medications and share patient records," reports STAT News.

The records included demographics, lab results, medications, procedures, allergies, and more.

"Collectively, the tested tools can read and write data to the major EHR systems," the report said on Monday.

Knight checked for vulnerabilities in apps built using the Fast Healthcare Interoperability Resources (FHIR) standard.

"She didn't need to use advanced cybersecurity hacking. She just used basic stuff that your freshman year of cybersecurity would have stressed," said John Moehrke, member of the FHIR management group.

The electronic health records housed at hospitals and health centres are well protected.

"But as soon as a patient gives permission for their data to leave the health record and head toward a third-party app - like programmes that track people's medications, for example - it's easy for hackers to access," The Verge reported.

The hacking attempts on the healthcare industry began to rise last year during the pandemic.

In 2020, 1 million people were affected almost every month by data breaches at healthcare organisations, according to health and human services (HHS) data.

Nation-state-backed hackers are also trying to infiltrate healthcare systems and steal vaccine-related research and other information, according to warnings from intelligence agencies in the US, Europe and Canada.

Four years ago, the UK's National Health Service (NHS) suddenly found itself one of the most high-profile victims of a global WannaCry ransomware attack.


More News
Row as AIMIM member abstains from 'Vande Mataram' in Bihar Assembly
5 hours ago
KTR urges PM to declare Kaleshwaram or Palamuru national project
6 hours ago
Get rid of 'why should I care' attitude: Shah to IPS probationers
6 hours ago
Andhra CM Jagan assures all help to flood victims
6 hours ago
12 more fliers from 'at risk' countries test Covid positive in Hyd
6 hours ago
India's foreign exchange reserves down $2.71 bn
6 hours ago
Don't let off workplace sexual harassment accused on technical grounds: SC
6 hours ago
Vicky-Katrina wedding: Event-related stickers must on vehicles
6 hours ago
Mary Kom supports Special Olympics Bharat
7 hours ago
No curbs are planned on cinema theatres, says Telangana
7 hours ago
World Tour Finals: Already qualified for semis, Sindhu loses her final group match to Chochuwong
8 hours ago
Decisions on booster dose, jabs for kids on scientific advice: Mandaviya
9 hours ago
Windows 11 to make it easier to change default browsers
9 hours ago
IND vs NZ, 2nd Test: Agarwal's ton takes India to 221/4 at stumps on Day 1
9 hours ago
Andhra CM assures pay revision for employees in 10 days
10 hours ago
Omicron: NCBS monitoring situation in four top cities
10 hours ago
Global action needed to regulate technology like cryptocurrency: Sitharaman
10 hours ago
How strong is Cyclone Jawad? 'Gulaab se jyada, Titli se kam'
10 hours ago
Lockdown should be 'last resort' to curb Omicron: WHO
10 hours ago
Deep depression intensifies into cyclonic storm and heading for north Andhra Pradesh in Bay of Bengal
10 hours ago
Clashes with China: Indian warships were deployed at forward positions, says Navy Chief
11 hours ago
India can lead the digital society: Mukesh Ambani
11 hours ago
Google Search adds new tools to help find doctors
11 hours ago
Actor Siddharth: Stop persecuting the film industry
11 hours ago
Anti-Imran song shared from Pak embassy in Serbia's official account
12 hours ago
Contestants undergo tough tasks in 'Bigg Boss Telugu 5' to win 'Ticket To Finale'
12 hours ago
Centre clarifies on 3rd wave possibility after Omicron detection
12 hours ago
Prepare for Omicron surge, WHO warns Asia-Pacific nations
12 hours ago
Lookinh beyond 'Major', Telugu actor Adivi Sesh eyes Bollywood projects
12 hours ago
GSK's early data shows Covid antibody drug effective against Omicron
14 hours ago