Healthcare software company Epic has temporarily redirected much of its product development capacity toward strengthening cybersecurity protections across its systems, including the widely used MyChart patient portal.
The focused review follows the use of Anthropic's cybersecurity model, Mythos, which identified software vulnerabilities requiring remediation. Epic expects the intensive security work to continue for approximately six weeks while its teams assess and reinforce affected products and configurations.
Protecting digital health information
Epic's MyChart platform supports access to medical information for more than 320 million patient records through healthcare providers across the United States. While hospitals and medical practices retain responsibility for the data held in their own systems, Epic is reviewing potential configuration-related risks that could affect record access and audit logging.
The company has not detailed the technical nature of the vulnerabilities. Its decision to place security improvements ahead of most new releases signals a preventive approach designed to help healthcare organizations maintain resilient digital services.
The move also illustrates how advanced AI tools are reshaping cybersecurity operations. These systems can help identify complex weaknesses at greater speed, enabling software providers to address potential risks before they become broader operational challenges.
As healthcare becomes increasingly connected, Epic's security-focused pause may reinforce a future in which continuous AI-assisted testing becomes a standard part of protecting digital health infrastructure.
