AI Weekly Malaysia

Epic, which makes the MyChart patient portal used to maintain over 320 million patient records in the US, has paused most of its product development for roughly six weeks to fix security bugs, per founder and CEO Judy Faulkner speaking to Modern Healthcare. The flaws surfaced after a deployment of Anthropic's frontier cybersecurity model, Mythos, and chief security officer Stirling Martin told The Times that some customer configurations of MyChart could let outsiders read patient records without leaving any entry in the software's logs. Martin said the model did not establish whether records could also be altered undetected, but Epic judged the risk serious enough to remediate; TechCrunch notes Epic has not disclosed the nature of the bugs.

Why: The concrete lesson is the logging gap, not the vendor: a read of patient records that leaves no trace in application logs defeats detection and audit entirely, and that class of bug is exactly what an AI security model found here at scale. If you ship anything with a permission model — patient data, tenant data, customer records — test whether privileged or misconfigured access paths produce an audit entry, and treat 'no log line' as a bug of its own. Also note the release-planning implication: a six-week freeze on most product development is what a serious finding costs, so teams running continuous release trains should decide in advance what triggers a stop-ship versus a patch-forward.

Blue Cross Blue Shield Association estimated that hospitals' use of AI-assisted medical coding contributed to $942 million in additional costs for its health plans between 2023 and 2025. BCBSA said much of the increase came from secondary diagnoses that moved patients into higher-paying reimbursement. AI is now used in medical billing and coding to translate procedures and diagnoses into standardized codes that appear on insurance claims and patient bills, while experts warn of an administrative AI arms race in U.S. healthcare.

Why: For most Malaysian developers and founders this is not a local policy change and requires no immediate action. If you build AI for claims, billing, or insurance workflows, it is a concrete case where AI-assisted coding shifted reimbursement by $942 million and drew public blame from a payer, so audit trails and explainability are not optional before deployment.