Luminis Health confirms cybersecurity incident disrupting systems across Maryland network

Luminis Health, the Maryland health system that operates Luminis Health Anne Arundel Medical Center in Annapolis and Luminis Health Doctors Community Medical Center in Lanham, is responding to a cybersecurity incident that has disrupted certain systems across the organization.

The health system, which runs more than 100 care locations across Anne Arundel and Prince George’s counties and Maryland’s Eastern Shore, first notified patients Monday that its MyChart patient portal and CareConnectNow platform were unavailable. Officials warned some patients could face delays but said outpatient appointments would proceed as scheduled unless patients were contacted directly.

Luminis Health publicly identified the disruption as a cybersecurity incident Tuesday evening, posting an alert on its website and a statement on Facebook around 6:45 p.m. The organization’s online portal remained down as of 7:30 p.m. that day.

By Wednesday, the health system said its investigation was ongoing and that some systems remained unavailable. Luminis Health said it took immediate action upon identifying the incident and launched an investigation supported by legal counsel and third-party cybersecurity experts.

The health system has not disclosed the nature of the incident, whether patient or employee information was compromised, or a timeline for full restoration. Luminis Health said it would notify affected individuals in accordance with applicable requirements if the investigation determines that notification is necessary.

Hospital operations have continued throughout the disruption, with Luminis Health stating that its facilities remain open and that patient care remains its top priority.

Patients with upcoming appointments or questions about scheduled services are being asked to call 443-222-0193 during normal business hours to confirm appointment status or receive further instructions.

The incident adds Luminis Health to a growing list of U.S. hospital systems that have faced cybersecurity disruptions affecting scheduling, records access and other operations in recent years.