CONNECT WITH US
Fintech

Fintech

Epic’s AI Security Test Exposes Untraceable Patient Data Access

PYMNTS – Fintech logo

Published on

Add as a preferred source on Google
Epic’s AI Security Test Exposes Untraceable Patient Data Access

Epic’s AI test turned up a hidden risk. Anthropic’s Claude Mythos found MyChart setups that could let outsiders read patient records without showing up in audit logs.

Security work moved ahead of new features. Epic shifted engineers off product development for about six weeks to close the gaps.

Patching is now the hard part. Anthropic’s Glasswing partners found more than 10,000 serious flaws in one month, but fixes take about two weeks each.

Epic Systems found flaws in certain MyChart configurations that could let someone view patient records without the access appearing in an audit trail. The company found them by testing its software with Anthropic’s Claude Mythos, Stirling Martin, Epic’s chief security officer, told The New York Times. Epic used Mythos to test how attackers might use open-source artificial intelligence agents to reach confidential records, the Times reported.

Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

Epic moved engineers off new product work to fix the flaws. Judy Faulkner, Epic’s founder and CEO, told Modern Healthcare the work would likely take about six weeks. Epic later said its AI and interoperability plans remained on track, Fierce Healthcare reported.

Mythos did not determine whether the flaws could be used to alter records without detection, TechCrunch reported . Martin said the risk was high enough to fix. S. hospitals and doctors’ offices. Epic says providers, not Epic, control that data.



Source link
Related Topics:Fintech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.