Luminis Health Suffered Cyberattack in September

Patients filed a class action lawsuit following a cyberattack that hit the Maryland health system on September 4.

Updated on Sept. 22, 2026 in Cybersecurity

Bold flat-color editorial illustration in navy and cream, depicting a symbolic clinical structure representing the impacted healthcare system.
Luminis Health is facing a class-action lawsuit following a September 4 cyberattack that forced patient portals offline across the Maryland health system. AI Illustration. Upload story photo >

Live Poll

Do you trust your local healthcare providers to adequately protect your personal medical data?

Luminis Health, which provides care for over 1.8 million Maryland patients, was struck by a cyberattack on September 4. The health system informed patients of the incident on September 10, while patient portals remain offline.

Why it matters

The breach has forced patients to rely on manual phone communications for essential hospital services, including scheduling, test results, and prescription requests. A class action lawsuit was filed last week alleging that the health system failed to provide sufficient protection for patient data.

Luminis Health serves a patient population of over 1.8 million across its Maryland facilities. While telephone capabilities have been restored at Anne Arundel Medical Center and Doctors Community Medical Center, online patient portals remain offline.

The players

Luminis Health

A health system providing medical care for over 1.8 million patients in Maryland.

Anne Arundel Medical Center

A medical facility under the Luminis Health system that experienced service disruptions.

Doctors Community Medical Center

A medical facility located in Lanham that is part of the affected Luminis Health network.

The details

Technical teams are currently testing all systems for safety and quality throughout the restoration process. Patients must continue to utilize phone communication for all hospital services as the organization works to bring its digital infrastructure back online.

Timeline

  1. September 4, 2026: Luminis Health was hit by a cyberattack.

  2. September 10, 2026: Luminis Health informed patients of the cyberattack.

  3. Week of September 14, 2026: Patients filed a class action lawsuit.

Roadmap

The incident follows a pattern established by the 2020 Universal Health Services cyberattack in terms of the scale and operational disruption to major hospital systems. This event highlights the growing trend of large-scale digital outages within regional health networks due to security breaches.

Patients currently must call their respective hospitals to manage test results, prescriptions, and appointment scheduling. Residents should anticipate potential delays in service as technical teams continue to prioritize safety and quality checks during the restoration of portal systems.

The takeaway

Patients should maintain direct communication with their healthcare providers via telephone until online services are fully verified for use. Managing medical information manually remains a temporary necessity for those seeking care within the Luminis Health system.

Further reading

For more information on current digital threats facing the region, read our Cybersecurity section.

Source note: This article includes information reported by WYPR.

Live Poll

Do you trust your local healthcare providers to adequately protect your personal medical data?