What's Happening?
LexisNexis Risk Solutions has announced the successful integration of its Identity Proofing for MyChart solution with Epic's Toolbox Program. This integration provides U.S. hospitals and health systems utilizing Epic electronic health record systems with modular
identity verification and authentication tools. The solution aims to secure Epic MyChart accounts and patient data while maintaining user-friendly workflows. Brad Bauer, SVP and general manager, healthcare, at LexisNexis Risk Solutions, stated that the integration aligns with Epic's best practices, simplifying deployment for healthcare IT teams. The Identity Proofing for MyChart suite offers various verification capabilities, including digital identity, email, phone association, and biometrics intelligence, leveraging AI and machine learning to combat evolving threats such as synthetic identity fraud, forged documents, and deepfake impersonations. This development comes as malicious bot attacks in healthcare increased by 59% in 2025, highlighting the critical need for robust digital access security in patient portals and workforce systems.
Why It's Important?
The integration of LexisNexis Risk Solutions' identity proofing with Epic's MyChart is crucial for strengthening the security posture of U.S. healthcare systems. Patient portals are increasingly central to healthcare interactions, encompassing account creation, login, medical record access, messaging, scheduling, and payments. Traditional password-based or single-point verification methods are no longer sufficient against sophisticated cyber threats. This enhanced security helps protect sensitive patient data from malicious actors, including those using AI-generated fake identities. By providing advanced, layered identity proofing, the solution helps healthcare organizations assess and manage risk across the entire identity access lifecycle. This is vital for maintaining patient trust and ensuring the integrity of healthcare operations, especially as the volume and complexity of digital interactions continue to grow. The ability to detect and prevent synthetic identity fraud and deepfake impersonations is paramount in safeguarding both patient privacy and financial transactions within the healthcare sector.
What's Next?
Healthcare organizations using Epic systems can now more easily implement advanced identity verification measures for their MyChart platforms. The availability of Identity Proofing for MyChart within the Epic Toolbox Program means that hospitals can select and combine capabilities based on their specific needs, operational priorities, and risk tolerance, without requiring custom development. This streamlined integration through the Epic Connection Hub is expected to lead to quicker adoption of these security enhancements. Future developments will likely focus on continuously evolving the AI and machine learning models within the solution to keep pace with new and emerging cyber threats. Healthcare providers will need to regularly review and update their identity strategies to ensure they are adequately protected against increasingly sophisticated fraud techniques, while also balancing security with patient usability and access to care.
Beyond the Headlines
This development underscores a broader trend in cybersecurity where the focus is shifting from merely detecting system breaches to verifying the authenticity of identities and interactions. The rise of AI-powered fraud, including synthetic identities and deepfakes, challenges conventional security paradigms that rely on static identity checks. The ethical implications of AI in fraud detection are significant, as these systems must be designed to be accurate and fair, avoiding biases that could disproportionately affect certain patient populations. Furthermore, the long-term impact could include a re-evaluation of how personal data is managed and protected across all industries, not just healthcare. The need for 'risk-based decisioning' rather than 'point-in-time identity checks' suggests a move towards dynamic, continuous authentication processes. This could set a precedent for other sectors dealing with high-value transactions and sensitive personal information, pushing for more adaptive and intelligent security frameworks.
