← Luminis Health

2026 Luminis Health — cybersecurity incident Sep 1; AAMC/Doctors Community systems disrupted

2026 Unknown records affected Share on X

Data compromised

Not confirmed publicly; operational impact to MyChart/CareConnectNow and other systems; patient/employee data impact under investigation

Technical writeup

Verified company statements and Maryland local press — September 1–3, 2026. Luminis Health announced a cybersecurity incident affecting certain systems across the organization (Anne Arundel Medical Center, Doctors Community Medical Center, and regional outpatient sites). Hospitals remained open; some digital services including MyChart were unavailable and some patients were rerouted. The health system has not disclosed whether patient or employee data was compromised; recordsAffected 0 pending a breach determination; companyConfirmed true for the cyber incident itself. Update September 22–25, 2026: Luminis restored telephone service across locations (MyChart read-only); some systems remain limited. Becker’s: unauthorized criminal actor confirmed. Class-action complaint filed in D. Md. alleging patient-data exposure risk; Luminis still has not published a patient-PII census — recordsAffected remains 0.

Root cause

Company-confirmed cybersecurity incident affecting certain systems across Luminis Health; investigation with counsel and third-party experts ongoing; no public confirmation of patient-data exfiltration at catalog time

References