HealthLeaders Media February 15, 2021
Patient records, including x-rays, pathology reports, and full PHI are vulnerable to these attacks.
Each of 30 popular mobile health applications are vulnerable to attacks via their application program interfaces (APIs), according to findings released last week by a security hacker and author, working with a threat protection technology company.
The study, All That We Let In, raises concerns that increasing reliance on mobile health apps during the pandemic is drawing threat actors to mobile health applications as their preferred attack surface.
The attacks described can permit unauthorized access to full patient records, including protected health information (PHI) and personally identifiable information.
“There will always be vulnerabilities in code so long as humans are writing it,” said Alissa Knight, researcher...