Scammers are copying the MyChart name and logo in fake emails, texts and websites to steal logins and card details. The real MyChart service was not breached.
Fake MyChart messages are going around, and some of them are built to steal your password, your card number, or both. MyChart is the patient portal many hospitals and clinics run on software from Epic. The reports describe scammers imitating it. They do not describe a break-in at MyChart itself.
The American Hospital Association warned on August 24, 2026 that scammers are using the MyChart name or logo in deceptive emails, text messages, phone calls and websites. It said MyChart had announced an increase in these scams in July 2026.
Two examples were named. One email links to a fake MyChart site that shows incorrect medical records. Another promotes a free 2026 Medicare Health Kit. A Fox News CyberGuy report from September 4, 2026 also describes a fake verification step that tells Windows users to paste a command, and an August version that downloads a file named Full_Analysis_Report.exe.
Anyone with a MyChart account is a target, because people expect real messages about results, visits and bills. A note that hints at a medical problem gets opened fast. Having portals at more than one provider makes a fake one easier to believe.
There is some good news. Your real account is not harmed just because a fake message reached your inbox. The risk starts when you type a password or card number into a fake page, or run something it gives you.
A message that looks polished proves nothing. Scammers copy logos and wording well. Penn Medicine, UAB Medicine and Pennsylvania Attorney General Dave Sunday have all issued warnings of their own.
The alert box above lists the steps. The core idea is simple: never use the link in the message. Open the MyChart app or your provider's own website yourself and see whether anything is waiting there.
No source gives a count of victims or messages. No group has been named as the one behind the campaigns. The fake page addresses were not published, so there is no list to block. It is also unclear whether the campaigns are still active, so it is safest to assume they are.
Treat any unexpected MyChart message as fake and check your account by opening the app or your provider's site yourself, never through a link.
Morristown police say scammers posing as bank staff are pushing people to withdraw cash, which is very hard to get back once it is handed over.
Read more: Morristown police warn of scam where fake bank staff ask for cashA viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about youA message saying your Amazon account was hacked is often the scam itself. Checking in the Amazon app first can protect your card, gift balance and phone.
Read more: If Amazon says your account was hacked, check before you call
