What Cybersecurity Risks do Epic IT protect Health Customers from?

1. Ransomware & data‑extortion – Encrypts EMRs, imaging archives and billing systems, then threatens to leak patient data unless a ransom is paid.

2. Email phishing & business‑email compromise (BEC) – Fake “pathology results” or “specialist referral” messages steal credentials and hijack mailboxes.

3. Unpatched clinical devices & IoT endpoints – Outdated radiology workstations, PACS servers and infusion pumps running legacy OS versions with known exploits.

4. Third‑party vendor breaches – Compromise of practice‑management SaaS, outsourced billing or pathology portals that hold shared patient information.

5. Telehealth platform exploits – Session hijacking or insecure APIs that expose live video consults and patient records.

6. My Health Record data leakage – Misconfigured SFTP shares or overly broad user privileges that allow unauthorised access to national health data.