Signal of the Day · Security & AI Risk
Epic says AI testing found settings that could let patient records be viewed without an audit-trail entry
What happenedEpic says testing its software with Anthropic's Mythos model found configurations that could let someone view patient records with no audit-trail entry, per a September 30 Times story.
Why it mattersSNF and AL/SL privacy monitoring assumes every chart view is logged, and post-acute staff often use hospital Epic portals for referrals and discharge records.
For leadersAsk EHR and portal vendors how they test audit-log completeness and how quickly urgent security fixes reach customers.