CYBERSECURITYTRACKER
Permanent story citation

Health systems warn of coordinated phishing targeting Epic’s patient portal

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5029

As cited

Copy frozen at (site build).

Health systems warn of coordinated phishing targeting Epic’s patient portal

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Health systems warn of coordinated phishing targeting Epic’s patient portal

Health systems across the country are warning patients about coordinated phishing attacks targeting Epic Systems' MyChart patient portal. The scam messages attempt to steal patient passwords to gain unauthorized access to medical records and personal health information. The campaign appears centralized, suggesting involvement by a single actor or organized group.

Why it matters: Healthcare providers and patients need to immediately alert staff and beneficiaries to verify message authenticity before clicking links or entering credentials; account takeover of patient portals exposes protected health information and enables medical identity theft.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary