Hacking into EHRs is too easy, group says

Hackers can access many electronic health records and modify them without the knowledge of the software’s legitimate users, according to a new study by an organization concerned about EHR vulnerabilities.

The eHealth Vulnerability Reporting Program, a nonprofit organization formed in 2006, issued a summary of its findings during a 15-month study assessing the security risks associated with EHR systems.

It found that basic hacking skills would be sufficient to enter a system, retrieve data and make changes, such as altering medication dosages or deleting records.

However, the “risk of vulnerability exploitation can be dramatically reduced when vulnerabilities are known and appropriate security controls are in place,” the report states.

For the most part, EHR systems are no more vulnerable to hacking than similar applications are, the report states. However, medical providers are less aware of those vulnerabilities and spend less money on data security as a percentage of their revenues, according to the report.

The organization recommended that EHR software vendors conduct more testing of their systems’ security and disclose any vulnerabilities they find to the public. Vendors also need to fix those vulnerabilities in a more timely fashion, the report states.

About the Author

Nancy Ferris is senior editor of Government Health IT.

Featured

  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

  • Census
    shutterstock image

    2020 Census to include citizenship question

    The Department of Commerce is breaking with recent practice and restoring a question about respondent citizenship last used in 1950, despite being urged not to by former Census directors and outside experts.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.