Health IT Security February 10, 2021
A damning new report shows a vast number of mHealth app and API vulnerabilities, including hardcoded APIs keys, are putting patients’ protected health information (PHI) at risk.
The 30 most popular mHealth apps are highly vulnerable to API cyberattacks, which could enable unauthorized access to full patient records, such as protected health information and personally identifiable information, according to a report from Knight Ink and Approov.
Alissa Knight, a leading cybersecurity analyst and partner at Knight Ink, analyzed the leading apps over the course of six months to assess vulnerabilities. The companies behind these apps agreed to participate in the study, as long as the findings were not directly attributed to the vendor.
App use has dramatically increased amid the...