Adapt Warns Patients About Fraudulent Emails Using MyChart Branding

Adapt Integrated Health Care is warning patients and community members about fraudulent emails that use the MyChart name and branding to request payment for medical products.

The emails reportedly tell recipients they can receive a medical kit after completing a survey or answering health-related questions. In some cases, recipients are then asked to pay a shipping fee or provide additional payment information.

Adapt said the messages are part of a broader phishing campaign and are not connected to a breach of its MyChart system or patient records. Receiving one of the emails does not mean a person’s MyChart account or medical information has been accessed.

In one reported case, a patient was asked to pay a shipping fee after answering several questions. After making the payment, the person was prompted to pay an additional $79. The patient reported the incident to Adapt and is working with their financial institution to address the fraudulent charge.

The emails may not be specifically targeting people known to use MyChart. More than 280 million patients in the United States have records in Epic, the electronic health record system that supports MyChart. Scammers may send the messages broadly, expecting that some recipients will recognize or use the service.

Fraudulent messages may include the MyChart logo or other familiar branding to appear legitimate. Adapt recommends that recipients:

• Do not provide payment information in response to an unexpected email offering a medical kit or other health-related product.
• Avoid clicking links or sharing personal or financial information when a message appears suspicious.
• Be cautious of unexpected offers, even when an email uses familiar logos or branding.
• Access MyChart through a trusted website or application to verify a message instead of using links in an unsolicited email.
• Contact their financial institution immediately if payment information may have been provided to a fraudulent source.
• Report suspected fraudulent communications to the organization being impersonated and their financial institution.

Adapt is encouraging anyone who receives a suspicious message appearing to come from MyChart to avoid responding or submitting payment information.