Health system flags vulnerability in Epic COVID-19 vaccine scheduler

Kat Jercich February 2, 2021

Michigan-based Beaumont Health experienced a security breach that allowed 2,700 people to schedule unauthorized COVID-19 vaccine appointments. The breach was caused by a user taking advantage of a vulnerability in Epic’s scheduling tool. The appointments have since been canceled, and Beaumont Health is working to address the situation. Epic, along with other EHR vendors, has been preparing for the COVID-19 vaccine rollout. Cybersecurity concerns around the vaccine rollout have been raised due to increased demand and potential vulnerabilities.