MyChart warns of phishing schemes using fraudulent emails, other messages 

Aug 24, 2026 - 04:14 PM
Symantic cyberattack

Epic’s MyChart has shared examples from potential phishing schemes observed as recently this month that include email messages linking to a fake MyChart website displaying erroneous medical records and others notifying of a free “2026 Medicare Health Kit.” MyChart provided recommendations for healthcare organizations and patients to help prevent or mitigate impacts from potential scams. The company announced last month that it has witnessed an uptick in scammers using the MyChart name or logo to create deceptive emails, text messages, phone calls and websites that appear official. 

For more information on this or other cyber and risk issues, contact John Riggi, AHA national advisor for cybersecurity and risk, at jriggi@aha.org, or Scott Gee, AHA deputy national advisor for cybersecurity and risk, at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.
 

Related News Articles

Headline
Agencies warn of malicious activity by SafePay ransomware group
A joint advisory issued Oct. 20 by U.S. and international agencies warns of recent activity by the SafePay Ransomware group. The group has been active since…
Headline
Critical vulnerabilities discovered impacting popular programming language for websites
Two critical vulnerabilities have been discovered in Hypertext Preprocessor, or PHP, a widely-used open-source scripted language for web development, its…
Headline
AHA podcast discusses implementation of the FBI’s ‘Operation Riptide’ combatting cybercrime
John Riggi, AHA national advisor for cybersecurity and risk, and Brett Leatherman, assistant director of the FBI Cyber Division, break down Operation Riptide,…
Headline
NSA guidance available on simple network management protocol 
The National Security Agency has issued guidance on reducing the risk of simple network management protocol abuse. SNMP consists of a standardized framework…
Headline
Microsoft, Health-ISAC announce disruption to cybercriminal businesses supplying attacks on healthcare, others 
Microsoft and Health-ISAC Oct. 15 announced that they disrupted three cybercriminal businesses that provided services to threat actors to attack more than 75…
Headline
Webinar to discuss voice threats and ways to improve security
The AHA will host a webinar Oct. 20 at 1 p.m. ET that will explore the evolving voice threat landscape — including voice phishing, or vishing, spoofing and…