A phishing campaign is targeting healthcare patients by impersonating MyChart, the widely used patient portal among provider offices.
The scam uses emails and text messages that claim recipients can receive a free “MyChart Medicare Kit” or “Senior Health Package.”
Here’s what you need to know to protect your clients.
What Does the MyChart Phishing Scam Look Like?
Email and text messages impersonating MyChart are enticing recipients with the allure of a free health package or kit in an attempt to collect personal information or get recipients to click malicious links.
Common subject lines include phrases such as “Your MyChart Medicare Kit Awaits!” and messaging includes offers of free senior wellness perks.
It is essential to know that MyChart does not send “Medicare Kits.”
If a client receives an unexpected email or text offering a free Medicare kit, wellness package, reward, or benefit through MyChart, they should assume it is suspicious until verified.
Who Is Being Targeted?
Because the scam references Medicare and senior wellness packages, older adults are the target audience and those who may be more likely to engage with these fraudulent messages.
Be sure to warn all of your clients, but especially those who:
- Recently enrolled in Medicare
- May use MyChart
- Are less familiar with cybersecurity threats
National Not Regional
Seven health organizations across the U.S. have informed patients about this scam:
- Sentara Health (Virginia)
- UMass Memorial Health (Massachusetts)
- Methodist Health System (Texas)
- Southeast Health (Alabama)
- Cass Health (Iowa)
- MetroHealth (Ohio)
- Tampa General Hospital (Florida)
Due to MyChart’s nationwide use, scammers appear to be leveraging the recognition of the brand, rather than targeting a particular hospital, state, or region.
The company behind MyChart, Epic Systems, specifically indicated that scammers are taking advantage of MyChart’s popularity and this is not a security issue with MyChart itself.
Where Do Clients Go From Here?
Epic has advised MyChart users that they can continue using the tool normally.
Your clients can refer to these common questions and answers for further guidance.
Additionally, Epic relayed that patients should treat any unsolicited message offering free Medicare or senior health packages through MyChart as suspicious and avoid interacting with it.
How Can You Help Protect Your Clients?
Advise clients to avoid clicking links or opening attachments from unexpected emails or texts claiming to be from MyChart, Medicare, or their healthcare provider.
Instead, they should:
- Open the MyChart app directly
- Log in through their provider’s official website
- Call their provider using a known phone number
Also, make sure your clients know to never provide the following info to unknown or untrusted sources:
- Medicare number
- Social Security number
- Date of birth
- Banking or payment information
- MyChart username or password
Lastly, tell clients to do the following with all messages received:
- Check the sender’s email address or phone number carefully
- Look for spelling and grammar mistakes
- Be skeptical of messages creating urgency or offering free items
Moving forward, protect clients by educating them to verify communications independently and to treat any unsolicited Medicare-related offer with caution.
Ritter is committed to helping keep your business and your clients safe. Partner with us today for our first-rate sales support and technology!
Not affiliated with or endorsed by Medicare or any government agency.
Share Post