Epic reveals fraud in record sharing amid new rollouts
Epic said it uncovered instances where a party allegedly impersonated providers to access patient records, prompting renewed calls for stricter access controls — even as Epic deployments continue across clinical settings like the University of the Pacific. The tension: expanded EHR footprints increase interoperability value but also widen potential attack surfaces. ( )
Epic’s federal complaint, filed Jan. 13, 2026, accuses Health Gorilla and associated companies of fraudulently accessing and monetizing roughly 300,000 patient records through national exchange frameworks. (healthcareitnews.com) Defendant GuardDog Telehealth admitted it misrepresented itself to obtain patient records and agreed to terms that include a permanent injunction restricting future access, according to filings and settlement notices. (fiercehealthcare.com) Health Gorilla has publicly denied wrongdoing and countered that Epic’s legal action risks constraining interoperability, framing the dispute as a competition-and-policy conflict as well as a data-security case. (healthcareitnews.com) Epic’s filings and subsequent reporting prompted renewed requests for federal oversight, with STAT noting Epic urged HHS and regulators to tighten verification controls on health information exchanges. (statnews.com) Separately, PDS Health Technologies announced on March 23, 2026 that it will implement a dental-optimized instance of Epic across the Arthur A. Dugoni School of Dentistry and the Pacific Health Care Collaborative. (prnewswire.com) PDS and trade coverage described the University of the Pacific deployment as the first academic rollout connecting medical, dental and ambulatory surgical settings with Epic, a move the vendor and integrator say will target clinical integration and revenue-cycle performance. (beckersdental.com)
