Scammers Have Impersonated MyChart Portals

Fraudsters are using fake websites and emails to trick patients into installing malware and sharing private data.

Updated on Sept. 24, 2026 in Cybersecurity

Isometric editorial illustration of a secure server rack in a cool-toned data room, representing digital healthcare security infrastructure. — Fraudsters are impersonating MyChart patient portals through phishing schemes, targeting patients to harvest sensitive medical and personal financial information. AI Illustration. Upload story photo >

Live Poll

Do you feel confident that your digital medical records are secure from cyber scams?

Scammers are actively impersonating the MyChart patient portal via phishing emails and text messages to steal personal information. While the legitimate portal remains secure, fraudulent sites use the MyChart logo to trick users into downloading malware.

Why it matters

Fraudsters exploit the perceived urgency of receiving medical results to pressure users into acting quickly. This tactic manipulates patient trust in healthcare systems to harvest sensitive payment and medical data.

Fraudulent websites utilize AI-generated text to mimic natural communication, specifically prompting users to input keystrokes that trigger unauthorized malware installation. Attackers even leverage fake Medicare kit offers to solicit financial data from victims.

The players

Epic

Epic is the software developer responsible for creating the MyChart patient portal used by healthcare systems across the country.

MyChart

MyChart is a secure, patient-facing web portal that allows individuals to access their medical records and communicate with healthcare providers.

The details

Attackers leverage the trusted MyChart branding to create a false sense of security while targeting diverse groups, including minors as young as 15. Although these operations often originate from locations like Myanmar, their impact reaches health organizations as far as Eastern Idaho.

September 24, 2026: Official warning issued regarding active scams.

The Tech Race

The current wave of MyChart impersonation scams follows the established pattern of attackers weaponizing trusted patient-facing interfaces to bypass security. This evolution highlights a shift where cybercriminals move beyond brute-force attacks to prioritize social engineering and brand exploitation.

Patients should verify that any portal link originates from their official provider to prevent accidental malware installation. Always ignore unsolicited messages offering medical or Medicare kits, as these are common vectors for identity theft.

The takeaway

Always navigate to your patient portal by manually typing the health system URL into your browser rather than clicking links in emails. If a message creates a sense of extreme urgency regarding your medical records, it is likely a fraudulent attempt to harvest your personal data.