Epic puts most product work on hold to fix patient-data security flaws

Epic, the maker of the MyChart portal used by patients to view and manage their medical information, has paused most product development for roughly six weeks to address security weaknesses. The flaws were uncovered with an AI tool designed to hunt for vulnerabilities, and Epic says some MyChart configurations could let an outsider view records without that access appearing in the system’s audit trail. That does not mean a breach has occurred: the company has not disclosed one, and it remains unclear whether records could be changed without detection. But the missing audit trail is the core concern, because hospitals rely on those logs to learn who accessed sensitive files and respond when something goes wrong.