Twenty-one health systems in the United States have warned patients about a phishing campaign that impersonates MyChart and offers a fake "MyChart Medicare Kit" or "Senior Health Package." The scam uses fraudulent emails and text messages to entice recipients to click malicious links or provide personal information.
The messages highlighted in the warnings include subject lines such as "Your MyChart Medicare Kit Awaits!" and make references intended to resemble official MyChart communications. According to the reporting, the campaign reaches patients through both email and SMS and uses the offer of a Medicare-focused kit or package as the lure.
Health systems alerted patients that the communications are fraudulent and that the offers are designed to trick recipients into taking actions that could compromise their personal information. The scam's stated appeals — a Medicare kit or senior health package tied to MyChart — are presented to increase the messages' credibility and prompt recipients to follow links or enter data.
The source described the types of messages (emails and texts), the deceptive subject line example, and the two specific package names used by the scammers: MyChart Medicare Kit and Senior Health Package. Beyond those elements, additional particulars about the messages’ content, sender addresses, or specific link destinations were not reported in the source.
The article identified the number of health systems that issued warnings — 21 — and noted that the campaign targeted patients at health systems across the country. The source did not list which health systems issued the warnings, how many patients received the fraudulent messages, whether any patients reported falling for the scam, or if any confirmed identity theft or data breaches resulted from the campaign.
The phishing messages use familiar branding and terminology tied to MyChart, which may make them appear legitimate to patients who receive routine communications from their medical providers. The inclusion of Medicare-focused language such as a "Medicare Kit" or a "Senior Health Package" may particularly resonate with older adults, who are often recipients of Medicare-related outreach.
The source material supplies the deceptive subject line example and the product names used in the scam but does not provide technical indicators of compromise, examples of sender addresses, screenshots, or other forensic details.
The reporting did not include several details that readers may expect in an incident notice: which specific health systems issued the alerts; whether any patients clicked the malicious links or submitted sensitive information; whether the phishers used lookalike domains, malicious attachments, or credential-harvesting web pages; and whether law enforcement or cybersecurity authorities were notified or investigating. The article also did not report any official guidance or recommended next steps issued by the named health systems.
Impersonation of patient portals can make phishing messages more convincing because patients commonly receive appointment reminders, billing notices, and test results through those services. In this case, the scam's use of the MyChart brand and Medicare-related terminology was the central tactic reported.
The source documented the campaign’s core features — the use of MyChart impersonation, the package names MyChart Medicare Kit and Senior Health Package, and the example subject line "Your MyChart Medicare Kit Awaits!" — and reported that 21 health systems issued warnings. It did not report remediation steps, specific patient outcomes, identifiers for the fraudulent messages, or any follow-up actions by health systems or regulators.
The article did not describe what actions the affected health systems recommended to patients or whether the warnings were accompanied by technical details for security teams. Readers seeking more information should consult communications directly from their own health system or the official MyChart channels; the source did not include links to individual alerts or statements from the named health systems.
Published by Becker's Hospital Review on 2026-08-21, the report focuses on the emergence of this phishing campaign and the warnings issued by multiple health systems. Additional investigative or technical details were not reported in the source.
Personalise this feed
Your specialty. Your sources. Your digest.
All set up in under 2 minutes.
Personalise this feed
Your specialty. Your sources. Your digest.
All set up in under 2 minutes.