Fierce Health Payers February 24, 2021
“Recovering hacker” Alissa Knight calls personal health information the most valuable data on the dark web. The Knight Ink cybersecurity researcher says, “It’s 10 times more the price of a credit card for a single PHI record.”
Knight partnered with mobile security company Approov to hack 30 mobile health apps to highlight the threats they face through application program interfaces (APIs). The findings were published in a recent report, “All That We Let In.”
All of the apps were found to be vulnerable to API attacks, and some allowed access to electronic health records (EHRs). The 30 apps collectively expose 23 million mobile health users to attacks, Knight reported. Of the 30 apps tests, 77% contained hardcoded API keys, of...