Luminis Health Restored Services After Cyberattack

The Maryland-based health system brought systems back online after a security incident began earlier this month.

Updated on Sept. 18, 2026 in Cybersecurity

Isometric editorial illustration of a dense, orderly vertical grid of cooling conduits and metallic pipes in a clean facility. — Luminis Health has restored telephone services and partially reopened its MyChart portal following a cybersecurity incident that began September 1. AI Illustration. Upload story photo >

Live Poll

Do you trust hospitals to protect your digital health records after a cybersecurity incident?

Luminis Health has restored telephone services and partially reopened its MyChart portal following a cybersecurity incident that began September 1. The health system continues to operate its hospitals and care sites as it works to fully restore digital features.

Why it matters

The restoration follows a complex recovery process after the health system faced a cybersecurity event that disrupted patient access. Officials are currently investigating whether patient data was impacted during the breach.

Luminis Health currently operates 3 hospitals and roughly 100 ambulatory care sites across its network. The restored MyChart portal is currently limited to read-only functionality, with scheduling and messaging features remaining offline.

The players

Luminis Health

This nonprofit health system is headquartered in Annapolis and serves the Maryland region through a network of hospitals and outpatient centers.

The details

Luminis Health has confirmed that its emergency departments at Anne Arundel Medical Center and Doctors Community Medical Center remain operational, with surgeries continuing across its network. Technical teams are currently testing individual systems for safety and quality as they are gradually brought back online.

The cybersecurity incident first began on September 1, 2026.
Luminis Health provided a status update on service restoration on September 18, 2026.

The Tech Race

This recovery effort highlights the ongoing struggle healthcare providers face to secure legacy information portals against evolving digital threats. It follows a pattern of heightened security protocols defined by the HIPAA Breach Notification Rule regarding the disclosure of data incidents.

Patients may still experience limited digital functionality as MyChart remains in read-only mode without scheduling or messaging capabilities. Those requiring medical services should note that all hospitals and ambulatory sites remain open for standard procedures.

The takeaway

Patients should prepare for continued digital limitations while the health system validates the safety of its remaining offline tools. Monitoring official communication channels remains the most reliable way to receive updates on full portal restoration.