These reported attacks

www.mychart.org • September 14, 2026

We've seen an uptick in scammers trying to trick patients by using the MyChart name or logo to make emails, text messages, phone calls, and websites look official. Some might try to steal your login information or promise free gifts if you enter payment details. The increase in attempts is due to scammers taking advantage of the popularity of the MyChart brand rather than any security concern, so you can continue to use MyChart as normal. If something doesn’t feel right, however, stop and check. The

page on MyChart.org has a few simple habits that go a long way toward keeping you safe.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MyChart Phishing Scams Target Patients in 2026 In August 2026, a surge in phishing scams using the MyChart brand has been reported, targeting patients through emails, texts, and phone calls. Scammers replicate the MyChart website to steal login credentials and personal information, often promising free gifts or critical health results. Epic's research and development director confirmed that these scams exploit the brand's popularity, not a security flaw in MyChart itself. Patients are advised to verify the authenticity of communications and avoid clicking on suspicious links. The scams have been characterized by fake websites that mimic MyChart, leading to malware installation on victims' devices. Epic has emphasized that legitimate MyChart communications will never request keyboard shortcuts or personal information in this manner. The ongoing phishing attempts have raised awareness among healthcare organizations about the need for patient education on cybersecurity. 46 sources 42

Extracted Entities

These reported attacks

The full story

Extracted Entities

Attack Types (1)

Domains (1)

MITRE ATT&CK (1)