Samwise Healthcare IT Newsletter
Monday, September 28, 2026
Epic Pauses Most Product Development to Focus on Cybersecurity
Epic Systems CEO Judy Faulkner disclosed at Modern Healthcare’s Leadership Summit this week that the EHR vendor paused most technology development to focus on system security. The company suspended hundreds of projects as it works to harden its systems against cyberattacks, with the effort expected to continue for approximately six more weeks. Epic responded by stressing its technology roadmap remains unchanged, pointing to continued advances including expanded AI capabilities, Agent Factory, and participation in Project Glasswing, a collaborative cybersecurity initiative. Despite the temporary pause, Epic says its AI, interoperability, and innovation agenda remains on track.
Sources: Modern Healthcare
Patient Files Class Action Lawsuit Against Sharp Healthcare Over Ambient AI Use Without Consent
A San Diego patient filed a proposed class action lawsuit against Sharp Healthcare, alleging the health system used an ambient AI tool during his clinical visit without consent. Jose Saucedo claims that during a July appointment at Sharp Rees-Stealy Medical Group, Abridge’s AI scribe recorded his physician conversation without his knowledge. California law requires all-party consent before recording clinical conversations. The lawsuit alleges individually identifiable medical information, including diagnoses, medications and treatment plans, could be accessed by unauthorized vendor personnel. Saucedo is seeking damages and amended medical records. Legal observers say the case appears to be among the first hospital lawsuits tied to ambient AI clinical documentation.
Sources: MobiHealthNews
McKesson Breach Exposes 6.4 Million Emails as ShinyHunters Claims 284 Million Patient Records Stolen
An August data breach at McKesson claimed by cybercrime group ShinyHunters has exposed approximately 6.4 million unique email addresses along with personal and healthcare records. The attackers used voice phishing, known as vishing, to compromise two McKesson employees and then extracted data from Salesforce and Snowflake platforms. ShinyHunters claimed to have stolen 284 million records and demanded $55 million in ransom. McKesson discovered the breach August 25 and said it affected its Oncology & Multispecialty and Medical-Surgical business units. Exfiltrated data may include patient names, dates of birth, Social Security numbers, medical record numbers and clinical information such as diagnoses and medications.
Sources: GovInfoSecurity
Health-ISAC Warns Healthcare Providers About Active ShinyHunters Vishing Campaign
Health-ISAC has issued a bulletin warning healthcare providers about an active vishing campaign by the ShinyHunters cybercrime group. Attackers are calling healthcare employees on personal mobile devices and sending emails from random accounts, directing targets to malicious links designed to bypass corporate security controls. ShinyHunters has registered medical-themed impersonation domains resembling legitimate company login portals to steal credentials. Once inside an identity, attackers pivot to connected SaaS platforms such as Microsoft 365, SharePoint and Salesforce to exfiltrate sensitive data. The warning follows the group’s claimed breach of McKesson involving 284 million patient records.
Sources: Healthcare IT News
Senators Renew Push for Mandatory Minimum Cybersecurity Standards for Healthcare Organizations
Two U.S. senators renewed their push for mandatory minimum cybersecurity standards in healthcare. Senators Ron Wyden and Mark Warner reintroduced the Health Infrastructure Security and Accountability Act, which would require HHS to establish baseline security requirements for HIPAA-covered organizations and business associates. The bill includes $800 million for rural and safety-net hospitals and $500 million for facilities meeting enhanced cybersecurity standards. Proponents point to 2026 data showing vendor breaches affected more than 31 million patients and that healthcare organizations faced 60 percent more critical vulnerabilities in the first half of 2026 compared to the same period in 2025.
Sources: GovInfoSecurity
Utah Medical Licensing Board Calls to Suspend AI Prescription Refill Pilot Over Patient Safety Concerns
Utah’s medical licensing board has called on the state to suspend an artificial intelligence prescription refill pilot, citing patient safety risks. The board asked the Utah Office of Artificial Intelligence Policy to halt Doctronic’s automated medication renewal program, which launched in January 2026 without the board’s review. The AI system handles 30-, 60-, and 90-day refills for 191 commonly prescribed drugs, including psychiatric medications and birth control, without provider reassessment. Board members say prescription renewals require clinical evaluation to monitor side effects and drug interactions. Supporters argue medication non-adherence causes approximately 125,000 preventable deaths annually in the United States.
Sources: Becker’s Hospital Review
Oracle Health Unveils AI-Powered Oncology EHR and Revenue Cycle Tools at Annual Summit
Oracle Health unveiled an AI-powered oncology electronic health record and new revenue cycle management tools at its annual Health and Life Sciences Summit. The oncology EHR runs on Oracle’s next-generation ambulatory framework and uses AI agents designed for medical specialties including oncology and radiology. Revenue cycle tools use AI to verify benefits, provide cost estimates, improve coding accuracy and identify claim denials before submission. Oracle leaders emphasized AI agents are intended to augment providers, not replace them. Oracle expects its health business to achieve double-digit revenue growth in fiscal 2027, fueled by an AI-driven modernization of the Cerner EHR platform.
Sources: Modern Healthcare
PeaceHealth Outsources IT Services to Tech Mahindra in Latest Health System IT Restructuring
PeaceHealth will outsource several information technology support services to global IT provider Tech Mahindra and its U.S. healthcare subsidiary The HCI Group beginning in November, the health system announced. Fewer than 250 employees, representing less than 1.5 percent of PeaceHealth’s total workforce, will be affected by the transition. PeaceHealth said it will retain control of IT strategy, technology decisions and cybersecurity oversight. The move is part of a broader trend among health systems in 2026, as Trinity Health laid off 557 IT workers and UnityPoint Health eliminated 207 roles, both shifting technology functions to outside vendors amid financial pressures.
Sources: Becker’s Hospital Review
Every newsletter preserved and searchable
Curated by JD · samwise.agency