HHS Audit Flags Web App Security Gaps at Large Hospital

Experts: Problems Are Frequent Weaknesses Across Healthcare Sector Entities Marianne Kolbasuk McGee (HealthInfoSec) • February 3, 2026

Security weaknesses identified by federal auditors in web-facing apps used by a large hospital in the Southeastern U.S. are likely indicative of a sector-wide exposure to hacks.

See Also: Reduce Cloud Risk in Healthcare with Security by Default

Attackers could use the misconfigurations to expose sensitive patient information vulnerable to cyberattacks, according to a report published Monday by the U.S. Department of Health and Human Services' Office of Inspector General.

Auditors examined whether the audited hospital had implemented cybersecurity controls to prevent and detect cyberattacks, ensure continuity of patient care in the event of a cyberattack and protect Medicare enrollee data.

The healthcare ...