MyChart phishing surge prompts statewide and regional health system alerts

Key points

• PA Attorney General Dave Sunday warned that scammers are impersonating MyChart to claim fake rewards.
• MyChart, licensed by Epic Systems, confirmed it does not run giveaways or prize promotions.
• Scams include fake 'Medicare Kits' requiring shipping fees and fake medical results prompting malware installation.
• Penn Medicine and Main Line Health stated they have received few or no reports of patient impact but are raising awareness.
• Patients are advised to access portals via official apps or bookmarked sites, not email links.

Background

This follows a broader wave of MyChart-related phishing warnings across the US in late August 2026, where over a dozen health systems alerted patients to brand-abuse scams. The current surge in Pennsylvania highlights a specific regional focus on 'reward' and 'kit' lures, distinct from earlier generic credential theft alerts.

How outlets are covering it

WFMZ and NBC10 emphasize the 'reward' and 'Medicare Kit' lures, noting that MyChart does not run such promotions. WCVB provides technical detail on how fake 'medical results' pages use keyboard shortcuts to install malware. LancasterOnline focuses on specific local providers like Lancaster General Health and Penn Medicine, noting that while warnings are widespread, actual patient impact reports remain low. All sources agree the issue is external fraud, not a MyChart security breach.

Why it matters

Patients using MyChart for routine care are at risk of financial loss and data theft. The scam leverages trust in a ubiquitous health portal, potentially exposing sensitive medical and financial information. Widespread alerts from state and local authorities indicate a coordinated, high-volume attack.

What to watch

Health systems continue to monitor for patient reports and update website security notices. MyChart and Epic Systems are likely to issue further guidance as new scam variants emerge. Patients should remain vigilant and verify all portal communications through official channels.