Health systems warn of coordinated phishing targeting Epic’s patient portal

Databreaches •Dissent • August 25, 2026

Chad Van Alstin reports: Numerous health systems across the country have issued alerts, warning patients to ignore scam messages that are attempting to phish passwords from patients, allowing hackers to gain access to Epic Systems’ MyChart patient portal. The effort appears to be coordinated by a single cybercriminal or a group, as more than a... Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MyChart Phishing Scams Target Patients in 2026 In August 2026, a surge in phishing scams using the MyChart brand has been reported, targeting patients through emails, texts, and phone calls. Scammers replicate the MyChart website to steal login credentials and personal information, often promising free gifts or critical health results. Epic's research and development director confirmed that these scams exploit the brand's popularity, not a security flaw in MyChart itself. Patients are advised to verify the authenticity of communications and avoid clicking on suspicious links. The scams have been characterized by fake websites that mimic MyChart, leading to malware installation on victims' devices. Epic has emphasized that legitimate MyChart communications will never request keyboard shortcuts or personal information in this manner. The ongoing phishing attempts have raised awareness among healthcare organizations about the need for patient education on cybersecurity. 36 sources 42

Extracted Entities

Health systems warn of coordinated phishing targeting Epic’s patient portal

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)