VTechFusion Team
VTechFusion Technologies
Epic, the medical records software giant, has paused most new product development for six weeks to fix security bugs that could put patients' data at risk, founder and CEO Judy Faulkner confirmed.
Found by AI
The flaws were uncovered when Epic directed an Anthropic AI security model at its own code through Project Glasswing, an Anthropic program that lets participating organizations scan their software for weaknesses and fix them.
What Was at Risk
Certain customer configurations of MyChart allowed outside actors to view medical records without triggering intrusion logs. Epic has not disclosed the technical details. It says it does not host customer medical data directly, but system-level flaws could expose information stored in hospital and clinic infrastructure.
Stopping Features to Fix Security
Halting most roadmap work for six weeks is an unusual step for a software vendor of Epic's size, and a sign of how seriously it treats access that leaves no audit trail.
The Bigger Shift
AI tools are now surfacing old, hidden bugs at a pace teams haven't faced before. Software owners should plan capacity to fix what these scans find — and treat "access without logs" findings as top priority, because they hide every other problem.
Frequently Asked Questions
Why did Epic pause product development?
To spend six weeks fixing security flaws in MyChart that could let outsiders view medical records without triggering intrusion logs.
How were the flaws found?
Epic used an Anthropic AI security model on its own code through Anthropic's Project Glasswing program.
Does Epic store patient data?
Epic says it does not host customer medical data directly, but the flaws could expose data held in hospital and clinic systems.
Media & Press Enquiries
For editorial enquiries, expert commentary, or case study access.
Ready to Build Something Great?
Let's turn your idea into a product. Book a free 30-minute discovery call with our team — no commitment, just clarity.