MyChart phishing scam targets patients across the U.S.

Loading Curie Briefs...

Getting the latest healthcare news for you

MyChart phishing scam targets patients across the U.S. | Curie Briefs

MyChart phishing scam targets patients across the U.S.

Summary

Scammers are impersonating MyChart, Epic's popular patient portal, to steal personal information from patients. More than a dozen health systems have issued warnings after fraudulent emails offering fake "senior health packages" began circulating. Epic says the surge is about brand exploitation, not a platform security breach, and urges users to stay vigilant.

MyChart phishing scam targets patients across the U.S.

Scammers are impersonating MyChart — Epic's widely used patient portal — to dupe patients into handing over personal information. More than a dozen health systems, including Texas Health, Avera Health, Methodist Health System, Premier Health, and Sentara Health, have issued warnings after fraudulent emails began circulating. These messages typically offer a free "senior health package" or "MyChart Medicare kit" and prompt recipients to click a link and submit personal details.

Epic's director of research and development, Trevor Berceau, clarified in July that the spike in scam attempts reflects cybercriminals capitalizing on MyChart's brand popularity — not any underlying security flaw in the platform itself. He reassured users they can continue using MyChart normally, but encouraged them to pause and verify anything that feels off.

Key Takeaways:

Scam messages may arrive via email, text, or phone call and often contain spelling errors or come from unfamiliar addresses
MyChart will never ask users to press keyboard shortcuts or change account contact details
AI is making phishing messages increasingly convincing, and healthcare is the industry most susceptible to phishing attacks

Why it matters: With healthcare organizations more vulnerable to phishing than any other major industry, patient-facing scams like this can erode trust in digital health tools and put sensitive personal data at risk. Clinicians and health systems should proactively educate patients on how to spot and report fraudulent communications.

Curie Brief

Loading Curie Briefs...

Curie Brief

Curie Brief

MyChart phishing scam targets patients across the U.S.

Summary

MyChart phishing scam targets patients across the U.S.

Related stories

Medical societies push Congress for a $20B investment to close the women's health gap

FDA-cleared AI medical devices lack real-world clinical evidence, study finds

Florida's Catholic bishops push back on AG over school vaccine exemptions