Epic stopped building new products for six weeks. An AI model found the flaws.
Epic Systems, whose MyChart software holds 320 million patient records, paused product development for six weeks to fix security flaws, TechCrunch reported on Friday.
Founder and chief executive Judy Faulkner disclosed the pause to Modern Healthcare last month.
Epic's security chief told The New York Times that "some customer configurations of MyChart could allow outsiders to access patient records without recording any intrusion in the software's logs." According to TechCrunch, Anthropic's security model Mythos found the flaws while deployed at Epic.
Epic did not respond to TechCrunch's request for comment. The report does not say whether anyone accessed patient records.
For hospitals reviewing exposure, the gap is in the logs: the report does not say whether they have other records, such as network or sign-in logs, that could show access before the fix.
Image: AI-generated.
Sources
Our file on Anthropic
- 7 Oct
Analysts said Claude subscribers use 42% of Anthropic's computing. They pay 10% of sales.
- 6 Oct
Microsoft planned $1 billion for employees using Claude. Then it cut over a third.
- 1 Oct
Anthropic said robots could do most physical tasks. They're cost-competitive on 0.3%.
- 1 Oct
Trump ordered federal agencies to rename AI. The new word is Super Intelligence.
- 30 Sept
Anthropic said Sonnet 5.5 cut task costs up to 30%.
For your next steering committee
- 1Ask which design decisions in your programme would be expensive to reverse, and when each was last reviewed.
- 2Ask which expected benefits change if the implementation approach changes.
- 3Ask who owns a decision to change course, and where it would be recorded.
Issue 01 of the ERP LEADERS brief puts a timeline, the three-number review and six questions on one page. Read issue 01
Welcome back. · Issue 01
