Medical records giant Epic pauses product development to fix security bugs that risk patients’ data