At least 30 health systems across the country are warning patients about a phishing wave that impersonates Epic’s MyChart patient portal. Fraudulent emails and texts dangle a “MyChart Medicare Kit” or “Senior Health Package” to trick recipients into clicking malicious links or handing over personal information.
Messages use subject lines such as “Your MyChart Medicare Kit Awaits!” and references to free senior wellness packages. The health systems said the messages do not come from them or from Epic’s MyChart platform.
Organizations that have published warnings or collected patient reports include GBMC HealthCare in Baltimore, Texas Health Resources, SGMC Health in Valdosta, Georgia, ECU Health in Greenville, North Carolina, Avera Health, UMass Memorial Health, Premier Health in Dayton, Ohio, Sentara Health, and Beebe Healthcare, among others.
The systems are urging patients to delete the messages without clicking links, verify sender addresses, watch for grammatical errors, and treat unsolicited free offers with suspicion.
Patient-portal phishing remains one of the most effective ways to steal credentials and personal data, and a lure aimed at Medicare beneficiaries gives the campaign a wide target. Patients who receive a suspicious message should contact their health system using a verified phone number rather than replying.
