< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [CRIME]

2 clusters · 11 sources · 3 days · First seen · Last updated

MyChart patient portal phishing campaign

Overview

A widespread phishing campaign has emerged targeting users of the MyChart patient portal, owned by Epic Systems. The campaign utilizes deceptive emails, text messages, and phone calls that mimic legitimate MyChart branding to trick individuals into clicking malicious links or disclosing sensitive personal and financial information.

Scammers often use tactics such as promising free health packages, Medicare-related benefits, medical test results, or loyalty rewards to create a sense of urgency. The primary objective of these attacks is to install malware on victims' devices or facilitate identity theft.

Both St. Luke’s University Health Network and Pennsylvania officials issued warnings regarding the scam, noting that the MyChart platform itself has not been compromised. Instead, cybercriminals are exploiting the brand's high recognition. The scale of the campaign is significant, with reports indicating approximately 190 million MyChart users worldwide could be targeted. In the United States, various hospitals, including those in Florida, have issued alerts to their patients. Epic Systems has warned that the fraudulent communications are often disguised as medical test results or health rewards to exploit the high level of brand trust associated with the platform, which is used by 44 percent of the healthcare market.

Entities

MyChart · Ifosfamid · Germany · Epic Systems · Tampa General Hospital

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. 12 days ago

    [HEALTH] 9 sources
    US cancer centers ration Ifosfamid due to drug shortage

    US cancer centers are rationing the chemotherapy drug Ifosfamid due to a production halt in Germany. Meanwhile, a major phishing campaign is targeting 190 million MyChart users via fraudulent medical alerts.

  2. 14 days ago

    [CRIME] 2 sources
    St. Luke’s and Pennsylvania officials warn of MyChart phishing scam

    St. Luke’s University Health Network and Pennsylvania officials are warning of a phishing scam using MyChart branding to steal personal information via fraudulent messages.

Sources

borncity.com · bradfordera.com · extratipp.com · fehmarn24.de · gesundheit-adhoc.de · hna.de · kurierverlag.de · leinetal24.de · mannheim24.de · tz.de · wrnjradio.com

This summary has been updated 1 time: see revision history