Epic, the tech giant behind MyChart, has put development on hold to secure its systems, after Anthropic’s Mythos AI found vulnerabilities allowing potential data breaches.
MyChart, used by over 320 million patients, could theoretically allow outsiders to access sensitive medical records without detection, according to the company’s chief security officer, Stirling Martin.
The pause in development is rare, but the rise of AI in cybersecurity has raised fears that hackers could more easily exploit these vulnerabilities. In 2024, a Change Healthcare breach exposed data of 192 million people, highlighting the severity of such risks.
Other recent breaches, including at CareCloud, McKesson, and Craneware, have affected tens of millions more, underlining the ongoing threat to patient data. The Department of Health and Human Services lists a DentaQuest breach as the largest so far in 2026.
While the pause may temporarily alleviate these risks, it could also delay crucial updates and improvements for healthcare providers and patients alike.
