Fake MyChart Alerts Steal Data

Cybercriminals are increasingly targeting patients through sophisticated phishing campaigns that mimic the legitimate MyChart patient portal. These scams aim to steal sensitive login credentials and, in some cases, install malware onto Windows PCs. Warnings have been issued by various healthcare institutions and state officials about these widespread fraudulent activities.

The fraudulent messages often appear as routine notifications about lab results or other health updates. Upon clicking a link within these deceptive emails or texts, users are directed to fake login pages that are designed to look identical to the real MyChart interface. Once credentials are entered, scammers may display fabricated medical records to create a sense of urgency.

Some advanced scams employ tactics that prompt Windows users to execute commands or download files, which can lead to malware infection. Additionally, separate campaigns are circulating that impersonate Medicare, offering bogus health kits in exchange for personal information and payment details, ultimately resulting in no product delivery.

To protect yourself, it is crucial to avoid clicking links in suspicious messages. Instead, access MyChart directly through the official app or your healthcare provider's trusted website. Always scrutinize sender email addresses and be wary of any request to run computer commands or download unknown files. Utilizing two-step verification and unique, strong passwords for your MyChart account adds an extra layer of security against credential theft.