Scammers Have Impersonated MyChart Portals

Fraudsters are using fake medical alerts to harvest data and distribute malware across the United States.

Updated on Sept. 24, 2026 in Cybersecurity

Isometric editorial illustration of a stack of dense metallic server cabinets in slate blue and oxblood against a cream background. — Scammers are impersonating patient portals like MyChart to harvest personal data and distribute malware, according to security reports. AI Illustration. Upload story photo >

Live Poll

Do you feel confident that your digital medical records are secure from cyber scams?

Scammers are actively impersonating the MyChart patient portal through deceptive emails, texts, and websites to steal sensitive personal information and install malware on user devices. Epic, the developer behind MyChart, has confirmed that the underlying portal infrastructure has not been compromised.

Why it matters

By exploiting the perceived urgency of medical results, attackers are successfully inducing patients to provide payment information or download malicious software. These campaigns often use AI to generate natural-sounding text, increasing the difficulty for users to distinguish legitimate health communications from fraud.

Fraudsters use AI to generate natural-sounding language, mimicking the MyChart brand to increase perceived legitimacy. Victims are prompted to perform verification steps on fake sites that trigger key-press sequences to install malware.

The players

Epic

A major developer of electronic health record software that maintains the MyChart patient portal infrastructure.

The details

The scam relies on sophisticated social engineering, where attackers leverage the MyChart logo to mimic official health notifications. Once a user visits a malicious site, they are prompted to perform specific computer interactions that bypass security norms and allow for the installation of unauthorized software. Some variants of these scams lure users with offers for free Medicare kits to solicit direct payment or identity data, frequently operating from international locations.

September 24, 2026: Official warning issued regarding active MyChart-themed scams.

The Tech Race

This campaign marks a departure from traditional phishing by integrating AI to automate deceptive, high-trust medical communications. It directly challenges the security posture of patient-facing platforms that rely on the established legitimacy of providers like Epic.

Users should verify any medical notifications by navigating directly to their known health provider portal rather than clicking links in texts or emails. Be cautious of any unsolicited offers for medical equipment that require payment or personal data verification.

The takeaway

The effectiveness of these scams relies on the high level of trust patients place in healthcare communications. Users should watch for any future official security bulletins from their specific health networks regarding compromised credentials or data breaches.