Epic——这家开发了广泛使用的 MyChart 软件的软件技术巨头——已暂停了大部分产品开发工作，以便保护其软件和系统免受网络攻击的威胁。
Epic, the software technology giant that makes the widely used MyChart software for accessing patients’ medical data, has paused most of its product development as the company works to protect its software and systems from cyberattacks.
Epic 的创始人兼首席执行官 Judy Faulkner 上个月告诉《Modern Healthcare》杂志，这一暂停措施可能会持续六周，期间公司将继续致力于“保护”其产品安全。此前，Anthropic 公司开发的名为 Mythos 的前沿网络安全模型发现了安全漏洞，这些漏洞可能导致黑客获取患者的医疗数据。
Judy Faulkner, the founder and chief executive of Epic, told Modern Healthcare last month that the pause would likely last six weeks while work continues on “safeguarding” the company’s products, after a deployment of Anthropic’s frontier cybersecurity model Mythos unearthed security flaws that could allow access to patients’ data.
虽然 Epic 尚未公开这些漏洞的具体细节，但其首席安全官 Stirling Martin 向《The Times》表示，某些客户对 MyChart 的配置设置可能使外部人员能够在不留下任何入侵痕迹的情况下访问患者的医疗记录。Martin 拒绝了 TechCrunch 的评论请求，但他指出：虽然该人工智能模型并未明确说明这些漏洞是否可以被利用来篡改患者记录，但这种风险已经足够严重，因此必须立即进行修复。
The company has not disclosed the nature of the bugs, but its chief security officer Stirling Martin told the Times that some customer configurations of MyChart could allow outsiders to access patient records without recording any intrusion in the software’s logs. Martin, who did not return TechCrunch’s request for comment, told The Times that the AI model did not say if the bug could be exploited to alter patient records without detection, but argued it was enough of a risk to remediate the issues.
Epic 的 MyChart 软件在美国各地的医院和诊所中被广泛使用，用于管理超过 3.2 亿份患者的医疗记录。Epic 表示自己无法直接访问客户的医疗数据，这一责任由医院和诊所等医疗服务机构承担。然而，如果存在 Epic 未知的漏洞，黑客可能会入侵这些系统并窃取其中存储的患者信息。
Epic’s widely used MyChart software is used to maintain over 320 million patient records across hospitals and doctor’s offices across the United States. Epic says it does not have access to customers’ medical data: that responsibility falls on healthcare providers like hospitals and doctor’s offices. But a bug unknown to Epic could allow hackers to compromise multiple MyChart affected systems located across the United States and raid the data stored within.
虽然企业为修复安全漏洞而暂停产品开发的情况并不常见，但人工智能工具的出现使得攻击者能够更快地发现并利用安全漏洞，这引发了人们对于数据泄露风险增加的担忧。
It’s rare for a company to pause development to fix security bugs, but the advent of AI tools capable of rapidly finding and exploiting security vulnerabilities has led to concerns that attackers could have an easier time at stealing data.
随着黑客试图获取高度敏感的医疗健康和医学数据，医疗保健服务提供商的数据泄露事件正日益普遍，因为黑客认为这些机构会付费阻止其在网上公布相关信息。2024年，保险巨头联合健康旗下、负责为大多数美国人处理支付和账单业务的医疗科技公司Change Healthcare遭到勒索软件攻击，黑客因此得以窃取超过1.92亿人的健康数据，几乎涵盖美国全部人口。该公司曾两次向黑客付款，以换取其不公布被盗数据。
Healthcare breaches are increasingly common as hackers seek access to highly sensitive health and medical data, under the assumption that providers would pay to prevent hackers from publishing the information online. A 2024 ransomware attack on Change Healthcare, a health-tech company owned by insurance giant UnitedHealth tasked with handling payments and billing for most Americans, allowed hackers to steal health data on more than 192 million people, the majority of people in the United States. The company paid the hackers twice not to publish the stolen data.
今年，医疗保健和科技公司接连发生一系列数据泄露，影响了数千万美国人。其中包括电子健康数据存储巨头CareCloud发生数据泄露时被窃取的医疗记录、药品分销商McKesson泄露的数百万行患者数据，以及总部位于英国的医疗科技公司Craneware被盗数量不明的数据；Craneware的软件在整个北美地区均有使用。
This year, a string of back-to-back data breaches at healthcare and tech companies have affected tens of millions of Americans. This includes medical records stolen during a breach at electronic health data storage giant CareCloud, millions of rows of patient data from pharmaceutical distributor McKesson, and an unspecified amount of stolen data from U.K.-based health tech company Craneware, whose software is used across North America.
美国卫生与公共服务部目前将牙科保险公司DentaQuest发生的一起影响1500万人的数据泄露列为2026年迄今规模最大的医疗相关数据泄露事件。
The Department of Health and Human Services currently lists a breach at dental insurance company DentaQuest affecting 15 million people as the largest healthcare-related data breach of 2026 so far.