Epic Pauses Product Development to Fix Security Bugs in Medical Records Systems

Epic, the dominant electronic health records company behind the widely used MyChart patient portal, has paused new product development to address security vulnerabilities that could put patient data at risk, according to a report from TechCrunch.

The company, which supplies software used by many of the largest hospital systems and healthcare providers in the United States, said it would redirect engineering resources toward fixing the identified bugs over the coming weeks rather than continuing work on new features.

MyChart allows patients to access medical records, communicate with providers, schedule appointments, and view test results online, making it one of the most widely used consumer-facing health technology platforms in the country. A security flaw in systems of this scale could potentially expose sensitive medical information for a large number of patients if left unaddressed.

Epic has not publicly detailed the precise nature of the vulnerabilities being fixed, nor has it said whether any patient data was compromised before the issues were identified. The decision to halt broader development work suggests the company considers the fixes a priority ahead of other planned updates.

Healthcare technology companies have faced increasing scrutiny over data security in recent years, as hospitals and clinics have become frequent targets of cyberattacks and data breaches. Electronic health record systems, given the volume and sensitivity of the information they store, are considered particularly high-value targets.

It is not yet clear when Epic expects to resume its regular product development schedule, or whether additional details about the vulnerabilities will be disclosed once the fixes are complete.