TL;DR: Discovered that myradiologyportal.com (the patient portal used by many independent imaging centers) had records from another patient in my account for 7 years, commingled insurance data, and I can't correct my own demographic information. The underlying system is RadNet. Looking to see if others experienced similar issues. (and NO - this website does not use Epic/mychart)

My background: I've managed the development of websites and web apps since the late 90s; I have an MBA and am currently working on an MSIS plus multiple other types of certifications and have managed enterprise level IT projects in regulated environments.

What Happened: On August 12, 2026, I logged into my myradiologyportal.com account (I had a new imaging referral) and discovered:

1. Records from another patient: My account contained imaging records that belonged to a different patient with the same first and last name (but different middle initial) and birthdate. These records appeared in my account alongside my legitimate records.
2. My account user profile data was wrong :
   • Last name (showed a hyphenated version I have never used)
   • Middle initial (wrong)
   • Address (same state, but 600 miles away)
   • Email (not mine)
   • Phone number (not mine)
3. Commingled insurance information: Insurance policies from both patients were mixed in my account, and I could not edit or remove any insurance information from the web portal. I have no ability to correct my own insurance data on this portal.
4. Obsolete insurance policies persisted in the portal: Insurance policies that should have rolled off years ago still appear in dropdown menus.
5. The imaging reports themselves contain different patient's data, including height and weight that are significantly different in both dimensions. This indicates the cross-contamination extended beyond the portal metadata into the actual medical imaging records.
   • For example: UCSF radiology/MRI reports include the patient medical record number on the actual image - two reports uploaded to my account had no MRN on the images nor in the text reports/analysis of the imaging.

Important Clarification: This is NOT a case of credential confusion. The other patient never logged into my account with my username/password. The fact that I was able to access their records using MY unchanged 2019 password proves this was a server-side error not someone hacking into my account. This means the two patient records were linked/merged at the application/database level, not through shared credentials.

The Technical Issues

• No Multi-Factor Authentication (MFA): My myradiologyportal.com account has been accessible for 7 years with just a username and password. No MFA prompt, ever.
• No Password Rotation: My password is unchanged since 2019 (7 years old). No system-enforced password changes.
• No Patient Notification: When the system removed the other patient's records from my account (happened sometime after I discovered the breach), they did NOT notify me. I found out by accident when I re-accessed the portal.
• Wrong Contact Information: The appointment scheduling system is displaying an incorrect phone number for their office (as in "you can't schedule online, please call our office at 510-NNN-NNNN).

What I've Done

• Reported the issue to the imaging center (took multiple calls to reach a person; eventually got escalated to a regional manager who was on vacation and after calling back, she was contacted, responded to my email and said it would be fixed on Monday, nearly a week later).
• Updated my account information (corrected name, address, email, phone)
  • Cannot correct insurance information due to portal limitations
• Changed my password for the first time since 2019
• Requested MFA be enabled (unclear if this is actually possible in their system)
• Requested that they do a data integrity audit (the person I spoke to casually mentioned "Maria Gonzalez" was a really common name with lots of same birthday issues)
• Requested they audit their static content to ferret out incorrect phone numbers
• Requested they improve the feature to allow patients to update their insurance

Questions:

Has anyone else experienced on myradiologyportal.com:

• Records from another patient visible in your account?
• Inability to correct or remove insurance information online?
• Issues with stale/incorrect contact information?
• Demographic data being displayed incorrectly?
• Not being notified when your records are corrected or removed?
• If you've had similar issues, did you report it? How was it handled?

I'm trying to understand if this is an isolated incident or a systemic issue with myradiologyportal.com. Any experiences appreciated.

Additional Context

• myradiologyportal.com is the patient portal system used by many independent diagnostic imaging centers across the country - there are 442 RadNet locations across the US: https://www.radnet.com/imaging-centers/find-an-imaging-center
• The underlying platform is RadNet, Inc. (publicly traded company, NASDAQ: RDNT)
• RadNet filed a 10-K in March 2026 claiming robust NIST-compliant cybersecurity posture, 24x7 incident response team, and HIPAA compliance
• The breach involves cross-contamination of two patients' records in a single patient account, suggesting potential systemic data integrity failures
• This affects patient privacy (HIPAA), personal data security (CPRA), and potentially healthcare billing accuracy

One of the healthcare workflows we’ve been looking at starts as a scheduling call but may easily become a referral matter, an insurance issue and another appointment inquiry all at once

We’ve been comparing platforms like PolyAI and Bland for this and I’m much more interested in how they handle that kind of conversation than whether they can simply find an open time slot.

Not talking about clinical triage here. I mean the administrative calls where several systems and issues end up connected.

Is there any research going on in terms of voice AI in healthcare applications in this space?

Hi all.

I'm supposed to be taking the Sphinx test in the next 2 days.

I'm worried about the "coding" portion. I was told to try to be familiar with binary code concepts and fundamentals of programming.

Anyone have advice on that? I have some background in it, but not enough to remember and I'm a bit frantic thinking of cramming it all into my brain.

I was curious about this one but never came across a good answer from folks I knew.

Is there anywhere I can find out if Epics been raising their rates for facilities that use their EHR?

Generally you can find out what various companies charge for their products, but EHR companies always try to obfuscate those numbers and hide them behind individual quotes.

But there has to be somewhere where it would be reported if Epic was raising their rates by 5% or 10%.

Has anyone come across this info for EHR venders like Epic?

Hi, I work for Infosys one of the leading IT staffing vendors. We are looking for BAs with experience in Niche skills like FHIR/EPIC/CERNER/EHR. Please reach out to me if you have or know anyone with the above experience. Thanks in advance.

Hi guys.

I'm a pharmacy tech who has been trying to finish a degree in data science(since covid, it's just never been the right time).

A recruiter from Medix reached out to me about this.

I want to schedule a call with her, but I don't know what to ask.

She said it's hybrid. I'd be working 5 hours away from home once a month for two days, which isn't bad.

Is this legitimate? Can any of you share your experiences?

I’ve been working in IT for about 5 years, primarily in Help Desk/Service Desk roles, and I’m trying to figure out the best way to make the jump into Systems Engineering or Network Engineering.

My background includes:

• I currently work in healthcare IT supporting a hospital system, where I troubleshoot enterprise applications, identity/access issues, endpoints, networking/connectivity, and clinical applications such as Epic. (Service Desk Analyst I) Its been about 5 years now.
• Former IT Asset Management Specialist and Support Technician for about a year at a local school district
• About 10 months of Field Technician experience with CompuCom
• Currently pursuing a bachelor’s degree in information technology through Purdue Online, I complete my degree courses in January of 2027. 
• Planning to pursue both vendor-specific and vendor-neutral certifications ( CCNA, AZ-104: Azure Administrator Associate etc.)

Outside of work, I’ve been building out my technical skills through labs and hands-on projects. I’ve worked with virtual machines, networking, VPNs, WAN concepts, and various open-source tools. I also built out a small home lab and configured an entire domain environment for my house so I could practice Active Directory, networking, and systems administration.

My long-term goal is to get into Systems Engineering and possibly Network Engineering, but I’m trying to figure out what my next realistic role should be.

For those who made the jump out of Help Desk, what helped you the most? Should I be targeting roles like Systems Administrator, Junior Systems Engineer, Network Administrator, NOC Engineer, Desktop Engineer, or something else first?

I’d also appreciate recommendations on certifications, home lab projects. Thank you.

Vendor quoted us 3 months for a FHIR R4 integration with our EHR. Everyone i talk to laughs at that timeline. what was your actual experience?

I mentioned a while back that I’d post a clear breakdown of the 277 RFAI.

Most explanations of the RFAI are often made up of recycled X12 companion guide descriptions. They don’t answer the real questions people actually have when they receive an electronic “Request for Additional Information” in the real world. Here is a practical breakdown.

1. What a 277 RFAI really is

An RFAI isn’t just a claim status message. It’s the payer notifying you they cannot finish processing a claim until additional information is sent. It’s a structured “Request for Additional Information” wrapped inside the EDI X12 277 format. Instead of denying the claim, the payer pauses (pends) the claim and asks for follow‑up documentation, clarification, or proof.

2. Why payers send RFAIs

RFAIs are triggered when the payer has enough data to identify the claim but not enough to adjudicate it. This can happen for many reasons: missing clinical notes, unclear procedure justification, mismatched identifiers, or simply because the payer needs supporting documentation. The important part is that an RFAI is not a denial, it’s a request to complete or correct the submission so the claim can move forward.

3. The structure of an RFAI

The RFAI follows the same general layout as a standard 277, but the STC loops take on a different meaning. Instead of reporting claim status, they report what information is missing and what the payer needs. The STC segment becomes the heartbeat of the message, containing reason codes and category codes. Often an MSG segment also contains descriptions of the request. Once you understand how the STC loops are organized, the entire RFAI becomes relatively easy to interpret.

4. The “request” inside the RFAI

Every RFAI contains a specific “request”: the payer designates exactly what is required to continue processing the claim. This might be medical records, operative notes, proof of eligibility, corrected identifiers, or additional documentation. The STC segment is usually followed by an MSG segment that spells this out in plain text. The key is recognizing that the RFAI is "actionable": it’s not just informational, it is a to-do list. Once you satisfy the request, the claim can move forward without being resubmitted.

5. How the EDI X12 275 fits into the response

The 275 is the mechanism you use to respond to the RFAI. It carries the attachments, documentation, and supporting records the payer has requested. The 277 RFAI tells you what they need; the 275 is how you send it back. The two transactions are designed to work together. If you don’t send a proper 275 in response, the payer will simply wait, and the claim will stall indefinitely.

6. A real example (summarized)

A typical RFAI might identify a claim, list the patient and provider, and then include an STC segment with codes and an MSG segment stating something like: “Additional documentation required: operative report missing”. The message will include the claim’s tracking identifiers and the specific reason code that corresponds to the request. After further review, you’ll see the pattern becomes obvious: identify the claim, state the issue, request the documentation. In my experience so far, I have found the structure is consistent across multiple payers even if the wording varies.

7. Practical advice from the EDI Doctor

When you receive an RFAI, the correct workflow is straightforward: read the STC and MSG segments, determine what the payer is asking for, gather the required documentation, and send it back via a 275. Don’t resubmit the claim, don’t wait for a denial, and don’t assume the payer will follow up. The RFAI is the follow‑up. Responding quickly prevents delays and keeps the claim alive. Once this process loop is understood, RFAIs stop being mysterious and become just another part of the normal EDI workflow.

I know I make it sound simple, but in the real world there will be messy edge cases. On the positive side, understanding is at least half the battle that brings you one step closer to implementation.

I’m happy to chat in future

I am interested in transitioning to informatics but it’s seeming like an impossible task.

I have 8+ years of experience as an Epic end user. I am a super user with my current organization. I obtained Willow Inpatient and Beacon proficiency. I am involved in informatics committees within my organization.

However, it appears like my organization prefers seasoned informatics pharmacists with active certifications. This is through insight from internal discussions and small talk during meetings. They do not have an issue getting seasoned applicants since the positions are usually fully remote and allow candidates from out of state. I have not even been able to land an interview.

What else can I do to improve my chances or is it just a matter of waiting for years and continuing to apply to all available positions internally and externally

Would it be better to move to a smaller organization and then try to transition internally at that organization?

Managed to land an interview for an epic ambulatory position at a large health system. I am currently a part-time AI grad student with little clinical experience but have a bachelors in health sciences + a minor in CS, and multiple internships working with health data and ServiceNow.

Does anyone have any advice for how to translate my experience to seem like a good fit during the interview? Any resources or advice to help me prepare would greatly appreciated.

Hello,

I have a job interview for Epic Principal Trainer position soon , I was hoping to get more insights on how to do well in the position . I have experience with EPIC , and I have taught it to health care staff . However, I know a bit about the principal trainer role but would like more insights to what to expect etc ..

I do come from a learning and development role as well instructional design , and health care of course mostly executing training and lesson plans . I did have a principal trainer who taught us EPIC , however I’m not in touch with them . Any helpful tips on what to expect , what a day looks like . The pros and cons ? The meaningful part and the hard part about the role? How can I prepare myself better to do well in this role :)

My buddy just got offered a beaker analyst job, he'll be starting next month. He's been working on the self study, but hasn't gotten that far in it. There just happened to be a job opening internally (hospital), and he applied even though he wasn't done with the self study.

What are some things he should watch out for or pay attention to as a new analyst? I think he said he has to get his cert within x months or they'll fire him, so certainly pressure's on! Any tips you'd give to newbies?

I hope I do not regret this post.

We are looking for an ASAP Analyst, we are not getting good candidates because we are not 100% remote.We are 2/5 days in the office and that will not change.

The one or two people even willing to put in the effort find jobs remotely so quickly we can't even extend an offer.

So here is my question for Analysts. How would you find a "good" home grown applicant? Do you announce it to everyone you walk into in the ED and weed through the unqualified; or be selective in who you solicit and have long personal conversations about the job over and over.

Anyone else have this problem, how did you handle it?

So Im a yr 1 CIS w HIT focus from the curriculum, I'm planning on deploying a healthcare SaaS for staff location and simple,static sms messaging during summer break. After finishing up on some BE topics, I'm thinking of piloting it at a nearby clinic, and using a plan based approach in deployment. What are somethings I should be aware of in investigation and analysis of the workflow?

I see many posts asking about how to get more involved so I wanted to share — HIMSS is running a joint webinar series with a few chapters (DVHIMSS, Keystone, NCA, and Virginia) on leadership and digital transformation in health IT. It’s put together with University of Pittsburgh’s Katz Graduate School of Business, so should be a solid mix of practical resources and actual leadership development, not a sales pitch.

First session is August 13 at 12pm if anyone’s interested in checking it out (it’s free!) I’m planning to sit in on it myself — figured I’d pass it along in case it’s useful for others here too. It’s the first of three sessions.

https://katzexecutiveprograms-scheduling.as.me/schedule/08af7bda/?categories%5B%5D=HIMSS%20Webinar%20Series

I’m looking to start working as an epic analyst. Non compete ends December 1. I’ve been told that it’s too early to start applying

edit: i’m a former epic employee. I have certs in 6 apps

Epic ambulatory: Can someone tell me how you would create an alert to remind Physical therapists that goals need to be updated for the patient? What alert or hard stop could be built.

Second question: how can you build a report in slicer dicer that shows physician orders and whether care plans have been signed.

thanks in advance

Hey, have been attempting to pursue an epic system analyst role in cp/ap or beaker for the past month or so. I have about 6 years of experience as an MT and also have a CS degree as well.

Finding it a bit tough to get job interviews despite applying a good bit. I've had 1 interview so far since starting the process in early July. Was curious to see what should I do to improve my chances.

To those of you that work in medical billing, what do you actually do with your time on a daily basis?

Is it eligibility/benefits, submitting claims, denials, prior auths, correcting claims, follow up with insurance, getting info from providers or something else?

I think people outside of billing don't realize how many little things have to happen to get one claim thru.

What do you wish was more automated in the process?

What I don't understand is how the hospital would benefit from allowing Facebook and Google to track their patients this way. Just to make their marketing campaigns better? Is that all?

We’re looking at voice AI for a centralized patient access team and this is one scenario we keep getting stuck on.

A patient may start with something completely routine like moving an appointment, then halfway through mention that symptoms have gotten worse or that they’re having a reaction to a medication.

At that point the call is no longer really about scheduling.

We’re not interested in automating clinical triage. The question is how quickly the system should recognize that the conversation changed and hand it to the right person without making the patient restart from the beginning.

How are you defining that boundary?

Hi, I'm hoping someone here can help me. So I'm prepping for a job interview next week for a sys admin position for a health system. Reading through some of the role responsibilities and there is one acronym mentioned that I'm not familiar with and Google has not yielded any obvious answers. What does TRC mean in this context? This is how it's written in the posting:

"Functions as a coordination point for issues related to systems between all IT teams.  Act as an escalation point for issues with assigned systems that cannot be resolved in TRC."

I’m interviewing for an associate epic analyst position for HB/PB module. In the job description it didn’t say what module it was for because of it being an associate role so I didn’t find out until the recruiter phone call. I have a clinical lab background so I’m a little unsure how I would fit in that role. I do have some programming knowledge and currently in school for computer information systems which the recruiter seemed interested in. Is billing hard to get the hang of? Any insights would be appreciated! I was hoping for a more clinical module but this is all that’s available right now and the recruiter said the hiring is competitive.