University Hospitals Restricts Online Services After Cyber Incident
The Cleveland health system disconnected its servers from the internet after detecting unusual activity on October 22, limiting patient digital access.
Updated on Nov. 6, 2026 in Cybersecurity
Live Poll
Do you trust your local hospital to keep patient services running during outages?
University Hospitals detected unusual activity on its servers on October 22 and disconnected its systems from the internet as a precaution. Online services including MyChart, prescription information, test results and online bill pay remain limited more than two weeks later.
Why it matters
Patients in the Cleveland area who rely on digital tools for visit notes, prescription renewals and messaging physicians are currently unable to use them. The disruption shows how quickly a network incident can cut off routine patient access even while physical facilities stay open.
A reported patient phone wait of 20 minutes reflects call centers handling unusually high volumes while MyChart and related online systems remain offline. The status update does not specify the attack type, the number of affected records, or a date for restoring full service.
The players
University Hospitals
A major Cleveland-based health system operating hospitals, emergency departments and physician offices across Northeast Ohio, and the organization that detected and responded to the cybersecurity incident.
The details
University Hospitals disconnected its systems from the internet while it investigated the incident. Hospitals, emergency departments and physician offices remain open and fully operational, while patients who need to schedule or change appointments must call designated phone numbers. Patients can still pay bills by mail through USPS or by calling 1-800-859-5906, option 1.
Timeline
October 22, 2026: University Hospitals detects unusual activity on its servers and disconnects systems from the internet.
November 5, 2026: University Hospitals issues an updated statement saying its hospitals remain operational.
November 6, 2026: Reporting notes digital services are still disrupted two weeks after the incident.
Tech Race
Like the 2024 Change Healthcare ransomware attack, which disrupted claims and patient services nationwide, this incident shows that hospitals often sever internet connections to contain an intrusion. The cost of that containment falls on patients who lose portal access even when clinical care continues.
Patients who depend on MyChart for test results or prescription renewals should call designated phone numbers instead, and expect longer waits. Bill payments can still be made by mail through USPS or by phone at 1-800-859-5906, option 1.
The takeaway
Patients should never share passwords or full Social Security numbers in response to unsolicited calls, texts or emails, since University Hospitals says it will never request them that way. Keeping a direct phone line to your care team handy is a practical safeguard while portal access is limited.
Further reading
For more on how health systems defend patient data, explore the Cybersecurity section.
Source note: This article includes information reported by News 5 Cleveland WEWS.
Live Poll
Do you trust your local hospital to keep patient services running during outages?
