A phishing scam impersonating MyChart is targeting patients at health systems across the country, with fraudulent emails and texts dangling a “MyChart Medicare Kit” or “Senior Health Package” to trick recipients into clicking malicious links or handing over personal information.
The messages, which use subject lines such as “Your MyChart Medicare Kit Awaits!” and references to free senior wellness packages, do not originate from the health systems or from Epic’s MyChart platform. Organizations are urging patients to delete the emails without clicking any links, verify sender addresses, watch for grammatical errors, and be skeptical of unsolicited free offers.
Here are the health systems that have warned patients about the scam:
— Sentara Health (Norfolk, Va.)
— UMass Memorial Health (Worcester, Mass.)
— Methodist Health System (Dallas)
— Southeast Health (Dothan, Ala.)
— Cass Health (Atlantic, Iowa)
— MetroHealth (Cleveland)
— Tampa (Fla.) General Hospital
In response to a request for comment, Epic pointed Becker’s to a July 27 post on MyChart.org. In it, Trevor Berceau, director of research and development at Epic, said the rise in scam attempts “is due to scammers taking advantage of the popularity of the MyChart brand rather than any security concern,” and that patients “can continue to use MyChart as normal.” He pointed users to the “Staying Safe” page on MyChart.org for additional guidance.
Editor’s note: This list will be updated as more organizations issue warnings. If you know of others that should be on this list, please email gbruce@beckershealthcare.com.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.