Cyberattack Takes Luminis Health's Two Maryland Hospitals Offline
Source: Luminis Health Facebook
EXECUTIVE SUMMARY
A cyberattack disclosed September 2, 2026 knocked patient portals and clinical systems offline across Luminis Health's two Maryland hospitals. Ambulances carrying non-critical patients are being rerouted, and electronic health records are inaccessible at both facilities.
ANALYSIS
Luminis Health Anne Arundel Medical Center in Annapolis and Luminis Health Doctors Community Medical Center in Lanham are both affected. Patient portals are down. Non-critical ambulance transports to both facilities are being diverted to other hospitals. Luminis Health set up a dedicated patient helpline at 443-222-0193 and retained legal counsel and third-party cybersecurity specialists to run a forensic investigation and restore systems.
The network has not confirmed whether patient data was accessed or exfiltrated. The specific malware type and attack vector have not been publicly identified. The Cybersecurity and Infrastructure Security Agency (CISA) and Health Information Sharing and Analysis Center (Health-ISAC) have not issued concurrent advisories as of September 2.
The attack came within days of a bomb threat at a Luminis Health facility. Investigators have not established any connection between the two events. Healthcare organizations that experience physical security incidents should treat subsequent cyber anomalies as requiring independent investigation rather than assuming the events are unrelated. Attribution and any criminal charges are pending the forensic review.
SOURCES
