Epic Halts Development to Address Cybersecurity Vulnerabilities in MyChart

• •Epic has paused product development for six weeks to address cybersecurity vulnerabilities.
• •AI tools identified flaws that could allow unauthorized access to patient records in MyChart.
• •The healthcare sector is increasingly targeted by cyberattacks, affecting millions.

Epic, the company behind the MyChart patient portal, has paused most product development for approximately six weeks to address significant cybersecurity vulnerabilities. These flaws were discovered by an AI cybersecurity model, which indicated that certain configurations of MyChart could allow unauthorized access to patient records without detection in system logs. The exact nature of these vulnerabilities remains undisclosed, but the risks prompted the company to take immediate action. Epic's chief security officer noted that while the AI model did not confirm if records could be altered undetected, the potential for exploitation was serious enough to warrant a pause. Epic's MyChart software manages over 320 million patient records across the U.S., making the implications of these vulnerabilities particularly concerning. The healthcare sector has seen a rise in cyberattacks, with numerous breaches affecting millions of individuals in recent years, including significant incidents at Change Healthcare and CareCloud. The Department of Health and Human Services lists a breach at DentaQuest affecting 15 million people as the largest healthcare-related data breach of 2026 so far.