---
title: "Data breach at Luminis Health"
description: "Luminis Health, which operates Anne Arundel Medical Center in Annapolis and Doctors Community Medical Center in Lanham, Maryland, announced on September 1, 2026 that it had been hit by a cyberattack disrupting several systems, including the MyChart patient portal and phone service at both hospitals."
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-01-luminis-health
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-01
dateModified: 2026-09-01
---
# Luminis Health

Data breach — Critical

Luminis Health, which operates Anne Arundel Medical Center in Annapolis and Doctors Community Medical Center in Lanham, Maryland, announced on September 1, 2026 that it had been hit by a cyberattack disrupting several systems, including the MyChart patient portal and phone service at both hospitals. The health system confirmed that patient data was compromised, including names, treatment information, and health insurance information. The exact number of affected individuals has not yet been determined; the incident was reported to the U.S. regulator (HHS) with a provisional minimum figure.

This data can be used to craft targeted phishing attempts impersonating the hospital or the patient's health insurer.

| Fact | Value |
| --- | --- |
| Disclosed on | September 1, 2026 |
| Incident dated | September 1, 2026 |
| Sector | Healthcare |
| Country | United States |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Health data
- Customer ID

## What you can do

- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Two Maryland hospitals still dealing with system issues after cyberattack](https://databreaches.net/2026/09/24/two-maryland-hospitals-still-dealing-with-system-issues-after-cyberattack/) — DataBreaches.net
- [Luminis Health Working to Restore Systems After Cyberattack](https://www.hipaajournal.com/luminis-health-jeffrey-reuben-well-child-horizon-eye-care-data-breaches/) — HIPAA Journal
- [Anne Arundel patients sue Luminis Health after cyberattack exposes medical data](https://www.thebanner.com/community/local-news/data-luminis-cybersecurity-lawsuit-anne-arundel-AVF7APR52NHOFGUNIVIYYVZCRU/) — The Baltimore Banner
- [Luminis Health cyberattack: What we know about Anne Arundel, Prince George's incident](https://www.thebanner.com/community/local-news/anne-arundel-medical-center-luminis-health-cyber-attack-OXFFDWFGRZAQXCRMSF6RO2NGPI/) — The Baltimore Banner
- [Luminis Health sued over alleged failure to protect patient data after cyberattack](https://www.cbsnews.com/baltimore/news/luminis-health-sued-alleged-failure-protect-patient-data-cyberattack/) — CBS Baltimore

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-01-luminis-health
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees