Atty. general warns of MyChart scam
Attorney General Dave Sunday issued a warning Friday of a new scam involving MyChart, a popular online patient portal used by many hospitals and health care providers.
Scammers are impersonating MyChart by sending emails or text messages that offer patients a chance to claim a reward in the form of a “MyChart Medicare Kit.” No such program or reward exists.
These emails and text messages are attempts to trick recipients into clicking on malicious links, and obtain passwords and personal information from patients, which allows hackers to gain access to the patients’ MyChart portals.
“Scammers are always looking for new ways to obtain as much of your personal information as possible,” Sunday said. “Stay on the lookout for this new scam tactic, and contact your medical office if you’re not sure how to access the MyChart website assigned to your providers.”
St. Luke’s University Health Network issued a statement Friday that it is aware of a phishing campaign.
“This activity is part of a broader scam affecting multiple healthcare organizations and is not the result of a known security issue within the MyChart platform itself,” the network said.
“St. Luke’s has been made aware of scam emails, text messages and phone calls that falsely claim to be from MyChart. These messages may offer a free health package, Medicare-related benefit, gift or other promotion and ask you to click a link or provide personal information. These communications are fraudulent and are not being sent by St. Luke’s or MyChart.
The network said St. Luke’s and MyChart will not contact you unexpectedly to ask for passwords, financial information or other sensitive personal information.
If you are unsure whether a message is legitimate, the network said not to respond.
Instead, log in to MyChart directly through the MyChart app or by visiting the St. Luke’s website.
If you believe you interacted with a suspicious message:
• Change your MyChart password immediately.
• Monitor your accounts for unusual activity.
• Contact the St. Luke’s MyChart Patient Support Line at 866-785-8537, option 5, for assistance.
At this time, there is no indication that MyChart itself has been compromised. Cybercriminals are simply misusing the MyChart name and branding in an attempt to trick patients into sharing personal information.
The attorney general added these warnings:
• Remain skeptical of any unsolicited free offer.
• Do not reply to any MyChart emails or text messages; only contact your medical team through the official MyChart website.
• Delete any suspicious emails or text messages without opening any attachments or clicking on any links.
• Do not click the “unsubscribe” button in these messages as this link is likely also malicious.
• Do not reply to these messages with your password or verification codes by phone, text or email.
• Do not follow instructions in these messages that are asking consumers to move to their computers to “verify,” “fix,” or “unlock” the MyChart account.
• Only use the official MyChart website or app provided by your medical tea
Consumers who have any questions, or feel that they have been victimized by this scam, may file a complaint with the Office of Attorney General’s Bureau of Consumer Protection by visiting the website, by emailing scams@attorneygeneral.gov, or by calling the office at 1-800-441-2555.