Ping Identity adds MyChart fraud tools to Epic Toolbox

Ping Identity has listed its patient identity verification and fraud protection tools for MyChart in Epic Toolbox, extending its reach into healthcare systems that use Epic's patient portal.

The move focuses on account creation and recovery in MyChart, where healthcare providers must keep access simple for patients while reducing fraud and protecting sensitive medical information. The package combines identity verification with fraud and risk detection for organisations using the portal.

Healthcare groups have been working to expand digital access without adding barriers that could deter patients from using online services. At the same time, providers must guard against account takeover, synthetic identities and other suspicious activity targeting patient records and administrative workflows.

By appearing in Epic Toolbox, Ping Identity's offering becomes available through Epic's integration ecosystem for health organisations. The tools are designed to work with existing MyChart-connected systems rather than requiring providers to replace current infrastructure.

Three functions

Ping Identity outlined three elements in the package for MyChart environments. The first is identity verification during account creation and recovery, using government-issued identity documents, biometric matching and liveness checks.

The second is threat and risk detection, designed to identify synthetic identities, account takeover attempts and suspicious behaviour through real-time behavioural and environmental signals. The third is orchestration of account creation and recovery journeys, allowing organisations to permit, challenge, step up or block interactions based on risk.

The approach is intended to move healthcare providers away from static authentication methods and towards ongoing verification across patient interactions. In practice, it reflects a broader push in healthcare technology to assess risk continuously rather than relying only on passwords or a single check at the start of a session.

Patient access has become a growing concern for healthcare providers as more services move online. Portals such as MyChart give patients access to records, messaging, scheduling and billing, but they also create targets for fraudsters seeking personal and medical data.

Account recovery is often seen as a particularly vulnerable point in the patient journey. Weak controls can give attackers access to existing accounts, while overly strict controls can prevent legitimate patients from regaining access, increasing call centre workloads and delaying care-related tasks.

Ping Identity said its verification model uses limited data collection and policies that support rapid deletion of personally identifiable information after identity verification. The company said this is intended to support privacy and compliance goals, including HIPAA-related requirements.

Operational pressure

For providers, the business case for these tools often extends beyond security. Hospitals and health systems are under pressure to reduce manual intervention in digital onboarding and support processes, particularly as administrative teams face cost constraints and high service demand.

Automating checks at account set-up and recovery can reduce the burden on staff who would otherwise handle exceptions manually. It can also shorten the time patients spend trying to register or regain access, which matters for organisations trying to keep digital services usable while tightening security controls.

The listing also highlights the role of platform marketplaces and tool directories in healthcare technology procurement. Inclusion in an established ecosystem can simplify discovery and evaluation for health organisations seeking technology that fits with software already used in clinical and administrative settings.

Epic's products are widely used across hospitals and health systems, giving MyChart integrations a potentially broad audience. That makes identity and fraud tools tied to the patient portal relevant not only to cybersecurity teams but also to digital operations, patient access and compliance leaders.

A photograph of Steve Gwizdala accompanied the announcement. He framed the product around the operational and security pressures facing healthcare providers.

"Healthcare organisations are being asked to do more with less while protecting increasingly sensitive data," said Steve Gwizdala, Vice President, Healthcare, Ping Identity. "Ping Identity helps secure patient account creation and recovery connected to MyChart, reducing risk and operational burden without adding friction for patients."