Epic Halts Product Development to Patch Critical MyChart Security Flaws

Judy Faulkner, the company’s founder and chief executive, initiated the pause to focus exclusively on strengthening system defenses. Epic’s chief security officer, Stirling Martin, confirmed the severity of the situation, noting that specific customer configurations could potentially permit outsiders to bypass existing logs. While the full extent of the risk remains under investigation, the company prioritized remediation to prevent potential exploitation of the 320 million patient records managed through its platform across the United States.

The industry is increasingly vulnerable to sophisticated cyber threats. The use of advanced AI to identify and exploit software weaknesses has accelerated, forcing companies to reconsider their security posture. This shift follows a series of high-profile medical data breaches, including the massive 2024 ransomware attack on Change Healthcare that compromised records for 192 million people. With healthcare providers facing persistent threats from actors seeking to monetize stolen information, Epic’s move marks a rare, proactive shift to prevent a similar systemic failure within its own infrastructure.