Security alert: Beware of MyChart phishing emails

Ballad Health is aware of fraudulent emails circulating that appear to come from MyChart®, Epic or healthcare organizations. These messages are not from Ballad Health and may attempt to trick you into clicking links, sharing personal information or signing up for products or services.

Healthcare organizations across the country are reporting phishing emails targeting MyChart users.

If you have any questions or concerns about an email you've received, you can call our consumer contact team at 1-833-822-5523. Our team is available Monday through Friday, 8 a.m. to 5 p.m.

Reported MyChart phishing email examples

MyChart phishing emails can be highly misleading. Scammers are sending convincing emails using the MyChart logo and language that is nearly identical to real MyChart messages.

Reported phishing scheme emails have included subject lines such as:

  • MyChart Medicare Kit
  • Senior Health Package
  • Your results are ready – view them in your portal
  • Patient Name, your results are in
  • Dear Patient Name, Important Information About Your Local Water Supply

Carefully check the sender’s email address before you open any emails claiming to be from MyChart. Official Ballad Health MyChart communication will only be sent from noreply@balladhealth.org or noreply@etsuhealth.org.

Reported phishing scheme emails have included messages such as:
Results email example

Your results are ready – view them in your portal

Dear Patient Name

Your medical results are now available. 

New test results are now available in your MyChart account. 

Please log in to your MyChart account to review your results and any notes provided by your care team.

Button: View My Results

Health alert email example

Water Supply Health Alert

Dear Patient Name,

Sarah from the MyChart team is reaching out to inform you that the Department of Health has issued an alert regarding the public water supply. Recent testing has detected elevated levels of E. coli bacteria in the water serving your area...

The secure link below will provide access to your personalized risk assessment and AI-generated preliminary report.

Button: Access My Personalized Risk Assessment

How to protect yourself from phishing emails

  • Do not click links or open attachments in suspicious emails.
  • Do not run commands on your computer.
    • Ballad Health or MyChart won't ask you to use keyboard shortcuts or run any commands on your computer.
    • We will not prompt you to "unlock," "fix" or "verify" your account through email.
  • Carefully check the sender's email address.
  • Watch for spelling errors, unusual wording or urgent requests for personal information
  • Remember that Ballad Health and MyChart will never ask you to provide passwords, financial information or sensitive personal information in response to an unsolicited email.

What to do if you receive a suspicious email

  • Do not click any links.
  • Do not download any attachments.

  • Do not run any commands on your computer.
  • Delete the message.

Frequently asked questions about MyChart phishing emails

Sometimes scammers will try to trick you into sharing your personal information, such as your MyChart username, password, verification code or payment information, by sending fraudulent emails. 

They may use the MyChart logo in their emails or webpages to make them look more convincing. 

They might also ask you to follow a link or provide your private information to receive test results or a gift.

Yes. The scams are not due to any security issue with MyChart. Scammers know that healthcare providers use MyChart and are using the MyChart name in an attempt to trick patients. 

You can continue to use MyChart as usual but be aware of any suspicious messages. Never provide your MyChart login information or verification code via email, text message, phone call or webpages with strange URLs.

When you receive an email, check the sender’s email address carefully. 
Look for misspellings or unusual wording. 

Any official Ballad Health MyChart communication will come from the email address noreply@balladhealth.org or noreply@etsuhealth.org.

When accessing your MyChart account, you might receive a verification code via email from Ballad Health. But Ballad Health or MyChart will never ask you to share your password or verification codes through email, text or phone call.

You should only enter your password or verification code directly into the MyChart app or MyChart website.

Always be cautious when an email offers you a gift, wellness package or medical kit in exchange for your personal information. MyChart, Epic and Ballad Health do not conduct giveaways or offer prizes in exchange for account information.

Just because you have received a phishing email does not mean someone has access to your medical records. But if you share your login information with a scammer, your account could be at risk. 

Do not share your username, password or verification code with anyone via email, text message or phone call.

When in doubt, don’t click! Contact our team at 1-833-822-5523 if you have any questions or concerns about an email you have received that references your care at Ballad Health. 

Contact our team

If you have any questions, please contact Ballad Health's consumer support team at 1-833-822-5523. Our team is available Monday through Friday, 8 a.m. to 5 p.m.

Call our consumer contact center