Coordinated Phishing Attacks Target Epic's MyChart Patient Portal

Numerous health systems across the U.S. have issued warnings about coordinated phishing scams targeting Epic's MyChart patient portal. These scams involve messages that impersonate the portal to trick patients into revealing their passwords. The attacks are believed to be orchestrated by a single cybercriminal or a group, affecting multiple health systems simultaneously. Hospitals are advising patients to ignore these fraudulent messages and remain vigilant. The Centers for Medicare & Medicaid Services (CMS) is pushing for healthcare interoperability, which may increase the risks associated with patient portal security. As a result, healthcare teams are prioritizing portal identity as a critical security frontier. The current status indicates a heightened alert among healthcare providers and patients alike.

Key Points: • Coordinated phishing scams are targeting Epic's MyChart portal. • Patients are advised to ignore scam messages requesting passwords. • Healthcare teams are treating patient portal identity as a vital security perimeter.