Epic’s security team has identified two distinct campaigns. The first pretends to show a new lab result, copies MyChart’s code, and then asks Windows users to open the Run box, paste a command, and press Enter – a step that installs malware. Some versions also offer a button that downloads a file named Full_Analysis_Report.exe, which the site guides the victim to run despite security warnings.

The second campaign lures recipients with a fake “2026 Medicare Health Kit” or “MyChart Medicare Kit.” After clicking the link, users are taken through unrelated ads to a MyChart‑styled survey that displays a countdown, claims the kit is free but asks for a shipping fee, and finally requests credit‑card details. No such kit is ever shipped.

MyChart is a patient portal created by Epic and used by hospitals and medical practices to let patients view test results, messages and appointments. The platform itself has not been breached; the scammers simply copy its branding and interface to trick users.

MyChart will never ask you to open the Windows Run box, run a command, or download a program to see your results. To stay safe, always open MyChart by typing the official URL or using the app, check the full sender address, enable two‑factor authentication, and avoid reusing passwords. Strong antivirus software and regular system updates add another layer of protection.