← Cases
United StatesTechnology and telecom2026 – ongoing

Epic Systems

Claude Mythos security testing of internal software

Epic paused some product development to patch security weaknesses found with AI

WorkingCompany's own claim

Problem

Security weaknesses in electronic health-record software could expose sensitive patient information. Epic needed to identify and repair vulnerabilities before attackers exploited them.

Approach

Epic used Anthropic's Claude Mythos model to examine its software for security weaknesses. CEO Judy Faulkner disclosed the findings and said the company paused certain product-development work to implement patches.

Results

No published figures

Takeaway

The findings changed development priorities. Epic did not disclose a measured reduction in security incidents.

Categories

Business function
IT and R&D
Innovation type
Process innovation
AI technology
Generative AI
Evidence
Company's own claim

Sources

Source summaries

[1]Wisconsin Public Radio7 Oct 2026

WPR reported Epic's disclosure that Claude Mythos identified potential security vulnerabilities. Faulkner said Epic paused some development work to implement patches; the report did not establish that attackers had exploited the weaknesses.

Full details are in the original sources.

Added 1 Nov 2026 · Updated 1 Nov 2026
Open case page ↗