MyChart Phishing Scams Target Patients in 2026

In August 2026, a surge in phishing scams using the MyChart brand has been reported, targeting patients through emails, texts, and phone calls. Scammers replicate the MyChart website to steal login credentials and personal information, often promising free gifts or critical health results. Epic's research and development director confirmed that these scams exploit the brand's popularity, not a security flaw in MyChart itself. Patients are advised to verify the authenticity of communications and avoid clicking on suspicious links. The scams have been characterized by fake websites that mimic MyChart, leading to malware installation on victims' devices. Epic has emphasized that legitimate MyChart communications will never request keyboard shortcuts or personal information in this manner. The ongoing phishing attempts have raised awareness among healthcare organizations about the need for patient education on cybersecurity.

Key Points: • Scammers are impersonating MyChart to steal patient information. • Phishing attempts have increased due to MyChart's popularity, not security vulnerabilities. • Patients should verify communications and avoid suspicious links.