Luminis Health
CriticalConfirmedHealthcare
Luminis Health, which operates Anne Arundel Medical Center in Annapolis and Doctors Community Medical Center in Lanham, Maryland, announced on September 1, 2026 that it had been hit by a cyberattack disrupting several systems, including the MyChart patient portal and phone service at both hospitals. The health system confirmed that patient data was compromised, including names, treatment information, and health insurance information. The exact number of affected individuals has not yet been determined; the incident was reported to the U.S. regulator (HHS) with a provisional minimum figure.
This data can be used to craft targeted phishing attempts impersonating the hospital or the patient's health insurer.
- Disclosed on
- September 1, 2026
- Incident dated
- September 1, 2026
- Sector
- Healthcare
- Country
- United States
- Cause
- Undisclosed
Exposed data
- Full name
- Health data
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Two Maryland hospitals still dealing with system issues after cyberattackDataBreaches.net
- Luminis Health Working to Restore Systems After CyberattackHIPAA Journal
- Anne Arundel patients sue Luminis Health after cyberattack exposes medical dataThe Baltimore Banner
- Luminis Health cyberattack: What we know about Anne Arundel, Prince George's incidentThe Baltimore Banner
- Luminis Health sued over alleged failure to protect patient data after cyberattackCBS Baltimore
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact