ChartSquad alerts health systems of fraud risk as bad actors pose as providers to exploit interoperability networks for patient data.
HEBER CITY, UT, UNITED STATES, February 9, 2026 /EINPresswire.com/ — As recent litigation exposes systematic fraud in medical records access, ChartSquad‘s Chief Legal Officer is alerting healthcare providers and health information exchanges: fraudulent actors are increasingly misrepresenting themselves as treating providers to gain unauthorized access to patient records through interoperability networks, creating significant compliance and liability exposure for health systems.
The warning follows Epic Systems Corporation’s January 13 federal lawsuit¹ alleging that health tech companies fraudulently accessed nearly 300,000 patient records by posing as legitimate healthcare entities and sold them to attorneys assembling mass tort cases. As evidence mounts of commercial intermediaries abusing healthcare interoperability frameworks designed to facilitate legitimate patient care, the implications for providers, health information exchanges, and the integrity of trusted data-sharing networks are significant and the compliance landscape is rapidly shifting.
A Statement from Melanie Carpenter, Esq., Chief Legal Officer, ChartSquad:
Recent litigation has brought renewed attention to a serious issue facing healthcare, legal services, and health information exchange: the misuse of patient data under false pretenses.
Let me be clear about where ChartSquad stands.
Patients have a legal and fundamental right to their medical records. Those records belong to the patient, not to vendors, not to intermediaries, and not to anyone attempting to monetize access by misrepresenting who they are or why they are requesting them.
Fraudulently holding oneself out as a treating healthcare provider to gain access to patient records and then reselling that information for profit is a gross abuse of the system. It undermines patient rights, violates the trust that interoperability frameworks are built on, and threatens the integrity of healthcare data exchange.
Equally important: lawyers should not buy their clients’ medical records.
There are lawful, transparent pathways for obtaining records directly from patients or providers with proper authorization. When records are knowingly purchased from entities that obtained them under false pretenses and those costs are then passed back to the client, it raises serious ethical and fiduciary concerns. Participation in such practices does not insulate law firms from risk; it can expose them to it.
At ChartSquad, we believe access and privacy are not competing values. Privacy is the foundation that makes access possible. Interoperability only works when every participant respects purpose limitations, patient consent, and the law.
That is why ChartSquad is built around a simple principle: patients come first.
We are committed to honoring patient access rights, rejecting misuse of healthcare credentials or exchange frameworks, providing transparency in how records are requested, used, and billed, and refusing to participate in systems that profit from deception.
Healthcare interoperability is one of the most powerful advancements in modern medicine, but only if it is protected. What we tolerate today defines what the system becomes tomorrow.
At ChartSquad, we choose trust. We choose accountability. And we choose to stand with patients.
About ChartSquad:
ChartSquad is a Personal Health Record (PHR) platform empowering patients nationwide with direct access to their healthcare journey. With legally protected access under federal Patient Right of Access laws, HIPAA, HITECH, and the 21st Century CURES Act, patients can request, manage, and share their information securely from their own PHR, with anyone they choose. We put the patient in control of their own Protected Health Information (PHI) as it should be, eliminating much of the red tape and privacy concerns that otherwise exist. With better access and control, ChartSquad believes patients can obtain better healthcare outcomes.
¹ Epic Systems Corporation v. Health Gorilla, Inc., et al., Case No. 3:26-cv-00029 (W.D. Wis. Jan. 13, 2026). Complaint available at: https://www.courthousenews.com/wp-content/uploads/2026/01/epic-systems-vs-health-gorilla-complaint.pdf
Melanie Carpenter
ChartSquad
email us here
Visit us on social media:
LinkedIn
Instagram
Facebook
YouTube
Legal Disclaimer:
EIN Presswire provides this news content “as is” without warranty of any kind. We do not accept any responsibility or liability
for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this
article. If you have any complaints or copyright issues related to this article, kindly contact the author above.
