Officials are warning Pennsylvania residents about scammers impersonating MyChart, an online patient portal used by hospitals and health care providers, including both St. Luke’s University Health Network and Lehigh Valley Health Network.
Scammers are attempting to get passwords and personal information by impersonating the service through emails or text messages that offer patients a chance to claim a reward in the form of a “MyChart Medicare Kit,” which does not exist, state Attorney General Dave Sunday said in a news release.
The emails and text messages try to trick recipients into clicking on malicious links, which would allow hackers to get access to their MyChart portals, the release states.
St. Luke’s said in a news release that the activity is part of a broader scam affecting multiple healthcare organizations, and it is not a known security issue within the MyChart platform.
The AG’s office provided the following guidance:
• Be skeptical of any unsolicited offer
• Do not reply to any MyChart emails or text messages
• Delete suspicious emails or text messages without opening any attachments or links
• Do not click “unsubscribe” buttons in the messages because the link is likely malicious
• Do not reply to the messages with your password or verification codes
• Do not follow the instructions in the messages
• Only use the official MyChart website or app provided by your health organization
Anyone who receives a message like that and is unsure of its legitimacy should log into MyChart directly. MyChart will not reach out to patients unexpectedly to ask for passwords, financial information or other personal information.
Those who feel they have been a victim of this scam may file a complaint on the AG’s office website or by contacting 1-800-441-2555 or scams@attorneygeneral.gov.
St. Luke’s encourages its patients who may have interacted with a suspicious message to change their password immediately and monitor accounts for unusual activity.
MyChart reported in late July there has been an uptick in scammers using the MyChart name or logo to make emails, text messages and websites seem official. The increase in attempts is because of the popularity of the brand, and not a security concern, the company said.