2026 Luminis Health — cybersecurity incident Sep 1; AAMC/Doctors Community systems disrupted
Data compromised
Not confirmed publicly; operational impact to MyChart/CareConnectNow and other systems; patient/employee data impact under investigation
Technical writeup
Verified company statements and Maryland local press — September 1–3, 2026. Luminis Health announced a cybersecurity incident affecting certain systems across the organization (Anne Arundel Medical Center, Doctors Community Medical Center, and regional outpatient sites). Hospitals remained open; some digital services including MyChart were unavailable and some patients were rerouted. The health system has not disclosed whether patient or employee data was compromised; recordsAffected 0 pending a breach determination; companyConfirmed true for the cyber incident itself. Update September 22–25, 2026: Luminis restored telephone service across locations (MyChart read-only); some systems remain limited. Becker’s: unauthorized criminal actor confirmed. Class-action complaint filed in D. Md. alleging patient-data exposure risk; Luminis still has not published a patient-PII census — recordsAffected remains 0.
Root cause
Company-confirmed cybersecurity incident affecting certain systems across Luminis Health; investigation with counsel and third-party experts ongoing; no public confirmation of patient-data exfiltration at catalog time
References
- https://www.luminishealth.org/en/cybersecurity-incident-update?language_content_entity=en
- https://www.wbaltv.com/article/anne-arundel-medical-center-cyberattack/73596317
- https://www.wusa9.com/article/news/health/cybersecurity-incident-disrupts-systems-major-maryland-health-network-luminis-prince-georges-anne-arundel-county/65-8571e80f-678d-4083-9479-9c4afbf81a46
- https://www.wypr.org/wypr-news/2026-09-22/two-maryland-hospitals-still-dealing-with-system-issues-after-cyberattack
- https://www.thebanner.com/community/local-news/data-luminis-cybersecurity-lawsuit-anne-arundel-AVF7APR52NHOFGUNIVIYYVZCRU/
- https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/luminis-health-confirms-criminal-actor-behind-cyber-incident/