MyChart Phishing Scams Steal Credentials, Push Windows Malware via 2 Fake Lures
Updated
Updated · Fox News · Sep 4
MyChart Phishing Scams Steal Credentials, Push Windows Malware via 2 Fake Lures
3 articles · Updated · Fox News · Sep 4
Summary
Epic and healthcare providers warned of nationwide phishing campaigns that mimic MyChart messages, using fake test results and bogus Medicare offers to capture logins, personal data and payment details.
One scam sends a “Your recent results are ready” email to a counterfeit sign-in page; after victims enter credentials, the site shows alarming health claims and can prompt Windows users to run commands or download a malicious .exe file.
A second campaign advertises a free “2026 Medicare Health Kit” or similar package, routes users through survey pages with countdown timers, then collects personal information and credit-card data for a shipping fee on a kit that never arrives.
Penn Medicine flagged the scam on Aug. 26, Pennsylvania’s attorney general issued a warning on Aug. 28, and Epic said it investigated two campaigns this summer, underscoring that the threat is impersonation of MyChart rather than a breach of the platform itself.
Users are being told to open MyChart only through the official app or provider website, enable 2FA, avoid any request to run Windows commands, and immediately change passwords or contact banks if they already interacted with a fake page.