According to St. Luke’s, the scam is affecting patients of multiple healthcare organizations and is not the result of a known security issue involving the MyChart platform.
The fraudulent messages may claim to offer a free health package, Medicare-related benefit, gift or other promotion. Recipients may then be instructed to click a link or provide personal or financial information.
St. Luke’s emphasized that the communications are not being sent by the health network or MyChart.
Patients should remember that St. Luke’s and MyChart will not unexpectedly contact them to request passwords, financial details or other sensitive personal information.
The health network advises patients to be cautious of messages that create a sense of urgency or offer something that appears too good to be true. Patients should not click links or open attachments contained in suspicious messages.
Anyone unsure whether a communication is legitimate should avoid responding and instead access their account directly through the official MyChart app or St. Luke’s website.
Patients who believe they interacted with a fraudulent message should immediately change their MyChart password, monitor their accounts for unusual activity and contact the St. Luke’s MyChart Patient Support Line at 866-785-8537, option 5.
St. Luke’s said there is currently no indication that MyChart itself has been compromised. Cybercriminals are instead using the platform’s familiar name and branding in an attempt to trick patients into providing personal information.