Technology
Officials warn of phishing campaigns impersonating MyChart patient portal
Scammers are using fake medical alerts and giveaway promotions to harvest patient credentials and distribute Windows malware.
The short version
- Healthcare providers and cybersecurity teams issued warnings regarding phishing campaigns that mimic the Epic MyChart patient portal.
- The schemes target patients by sending fraudulent alerts about critical test results or offering bogus Medicare health kits.
- Victims risk credential theft, financial loss, and malware infections caused by executing malicious commands or downloading executable files.
- Health systems advise patients to access portals directly through verified apps or bookmarks rather than clicking links in unexpected messages.
Key facts
- Penn Medicine issued a warning on August 26, 2026, about a nationwide phishing operation using emails and text messages designed to mimic MyChart.[Fox News]
- Pennsylvania Attorney General Dave Sunday cautioned consumers on August 28, 2026, regarding a scam offering a fake Medicare kit under the guise of MyChart.[Fox News]
- Software provider Epic documented two distinct phishing campaigns impersonating its portal, emphasizing that the MyChart system itself has not suffered a platform breach.[Fox News]
- One attack variant displays a fake warning about blood work and directs Windows users to run a clipboard command or download an executable file, which installs malware.[Fox News]
- A second campaign uses promotional lures such as a free 2026 Medicare Health Kit to elicit personal information and credit card details for fake shipping fees.[Fox News]
What remains uncertain
- The total number of patients affected or compromised across the nation has not been publicly specified.[Fox News]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.