Hospital System Flaws Could Leak Patient Data, CISA Says

Agency Warns Vertikal Systems Vulnerabilities Could Help Hackers Access Data Marianne Kolbasuk McGee (HealthInfoSec) • October 29, 2025

U.S. federal authorities are warning about vulnerabilities in hospital information management systems from Romanian firm Vertikal Systems that could allow hackers to obtain and disclose patient data. The affected systems are used mostly by smaller hospitals and clinics outside the United States.

See Also: The Healthcare CISO's Guide to Medical IoT Security

The Cybersecurity Infrastructure and Security Agency in an advisory Tuesday said the flaws discovered in Vertikal's Hospital Manager Backend Services can be remotely exploited with low attack complexity.

"Successful exploitation of these vulnerabilities could allow an attacker to obtain unauthorized access to and disclose sensitive information," CISA said.

The first of the two Vertikal system vulnerabilities involves "exposure of ...