H-ISAC Finished Intelligence Report TLP White: HC3 Analyst Note - OpenEMR Sector Alert

January 31, 2023

Health-ISAC, in coordination with HC3, is sharing the following report on OpenEMR Sector Alert.

Three vulnerabilities were identified in an older version of OpenEMR, a popular electronic health records system, which can allow for a cyberattacker to access sensitive information and even compromise the entire system. The prevalence of ransomware attacks and data breaches impacting the health sector make these vulnerabilities especially important. These vulnerabilities were fixed in newer 

versions of OpeEMR, and therefore upgrading to the most recent version will fully patch them.

To see the full report below.

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

National Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272